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ABSTRACT 


A class of-monadic program schemas is defined. This class, called 
iteration schemas,.consists of schemas whose programs comprise assignment 
statements, conditional statements, and iteration statements. These 
schemas are shown to correspond to program schemas which are structured, 
and are shown to be strictly less "powerful" than the monadic program 
schemas. 

A notion of equivalence is formalized as the functional equivalence 
of schemas under free interpretations, interpretations which represent 
symbolically the set of all interpretations of a schema. It is shown that 
the equivalence preblem for iteration schemas is unsolvable, even if the 
schemas possess highly restrictive properties. Questions are raised 
regarding the decidability of equivalence for various subclasses of 
iteration schemas, and equivalence is shown to be decidable for several of 
these classes. 

The equivalence problems for structured independent location 
schemas are examined in particular detail. A weak form of equivalence is 
shown to be undecidable for the schemas, and the general -equivalence 
problem is shown to be related in a non-trivial manner to the equivalence 
problem for multi-tape finite automata. 
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uev 

vo *(x,u) 
is equivalent to the sequence of statements: 

ve +Hx,y) 

ut (x,y) - 

veo *(x,v) 
which in turn is equivalent to the sequence: 

ve #(x,x) 

uc ~ #(x,y) 

ve #,u) 

uc +(x,y) 
if we view the sequences as portions of programs expressed in some 
programming language in which 't' and '*' represent addition and 
multiplication, respectively. From a ‘schematological point of vaeus 
however, only the first two sequences are equivalent: the last sequence 
will be equivalent to the ethers only if the fiction eeacciaced with the 


symbol '*' distributes over that associated with the symbol ‘+t. 


1.2 Schematology: A Brief History. 

The first schematized model for computation ie generally attributed. 
to Ianov [9]. In his model, the data space of a2 scupirakiat is treated 
as a single entity which is altered via a: sequence of function 


applications, the particular function to be applied at. any point in the 


Aes is es 


sequence depending on the outcomes of a number of predicates applied to 
the current value of the data space. Rutledge [26] later demonstrated 
a correspondence between the Tanov model and a class of finite state 
automata, and it is not surprising, therefore, that the equivaience.. 


problem for Ianov schemas is solvable. 


The major difficulty with the Ianov model is that it discards much 
information about the essential properties of programs being represented. 
In particular, the data space of real. computations is generally divided 
into a number of discrete components, and at each step in a aeepeiattes 
functions and predicates are applied to certain subsets of these 
components, rather than to the total data space. The specification of 
the object components of each application establishes a data dependency 
relation among them, and it is prcelaaly this relation which is missing 


Spe 


from the Ianov model. 


TUCENEA: Park, and zeterson {16} proposes 4 a more familiar 
schematized model — proprer Achemes — in which data Sepeneeney 
is illustrated by egaceecing a unique cymbol with each component of the 
data space of a computation and specifying, by means of an uninterpreted 
program consisting of assignment instructions and eras fod instructions, 
the sequence of functions and predicates to be applied during‘ the | 
‘computation and the object: components. of Poe a Oe ' They were 
able to demonstrate that such schemas are: capable of simulating. in a 
‘natural way. multi-head finite automata [25] and thus: that the equivalence 


problem for program schemas is unsolvable. 
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Much of the subsequent work in schematology has been devoted to the 
study of schematized models possessing special features which facilitate 
discussions of computational parallelism, determinacy, productivity, etc. 
(cf, [3], [5], [7], [10], [14], [21], [241], [27]}. In several cases, 
which are discussed below, equivalence problems have also been considered 


in the work. 


1.3 Schematology: Equivalence Problems. 

Equivalence problems for schematized models have been of considerable 
interest to theoreticians since several open problems of long standing 
in automata theory can be shown reducible to, or closely related to, the 
equivalence problems for certain classes of computation schemas. For 
example, it has been demonstrated that the equivalence problem for 
multi-tape finite automata as defined in [23] is reducible to the 
equivalence problem for a particularly simple class of program schemas 
containing only monadic function and predicate symbols; similarly, it has 
been shown that the equivalence problem for deterministic pushdown 
automata is closely related to that for the class of schemas defined by 
deBakker and Scott [4]. But schema equivalence problems have certain 
practical applications as well, particularly with regard to the design 
of compilers. Since compilers frequently deal with programs containing 
user defined functions and subroutines which have, during compilation, 
no semantic content, procedures for deciding whether certain program 
transformations are equivalence preserving in a schematological sense 
are apt to be of great value, particularly if program optimization or 


simplification is to be attempted during the compilation process. For 
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example, if we are interested in whether the evaluation of some externally 
defined function may take place during progran execution at some point 
other than that indicated by its position within a given sequence of 
instructions (or indeed if it need occur at all), we are dealing with 
schematological issues. In fact, since ‘program optimization generally 
involves changing the structure of a program without changing its 
functional behavior, we must either be prepared to-deal with issues of 
schematological -equivalence or restrict any optimization to those 
portions of a program which are completely interpreted at compilation 
time (or whenever such optimisation is to occur). Since increasing 
emphasis is being placed on encouraging the widespread sharing of 
procedures written by many different users, each of: whom can be 
assumed to know very little ebout the internal behavior of procedures 
written by others, the former option seems the more desirable. 

Thus far resuits concerning the decidability of equivalence for 
schematized models have been quite elusive, and in most cases in which 
results have been obtained for fairly general classes of schemes the 
results have been negative (i.e. have indicated the unéecidability of 
equivalence). The few positive results include the somewhat trivial 
result for Ianov schemas mentioned earlier; the results-of Askeroft 
Manne, and Pnueli concerning monadic functional schemas [ 2]; the 
result (for a rather strong definition of equivalence) of Keller for a 
class of program schemas [11], and the results of Paterson for 
"progressive" program schemas (in which a computed value is immediately 


reused in the next computation step), and monadic program schemas 
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without nested loops in their control structures [18]. In any case, the 
equivalence problems for a great many interesting classes of schemas are 
open and, despite the optimistic predictions of Paterson in [19], results 


have not been quickly forthcoming. 
1.4 Outline of the Thesis. 


In this thesis, we consider the problem of deciding equivalence for 
classes of program schemas (as defined by Luckham et al) which have been 
restricted in certain ways in an attempt to make the problem somewhat 
tractable. Primarily, we are restricting attention to program schemas 
which contain only monadic function and predicate symbols and which are 
structured in such a way as to represent only "whilish" programs: those 
composed of assignment statements, conditional statements, and iteration 
statements (i.e. "while" and "until" statements). Our choice of program 
schemas as a starting point for the study is motivated by the fact that 
they are quite general in their ability to model computations, and they 
permit a high degree of informality in discussions since they are 
inherently familiar to anyone who has dealt with any sort of programming 
language. Also, the equivalence problems for Sextein Vines of the 
schemas have been studied rather extensively because of their relations 
to well-known problems in automata theory. 

We consider in this thesis several classes of schemas and oue 
primary objective is to answer a@s many as possible of the questions we 
pose regarding the decidability of equivalence for the classes. But we 


are also interested in the relationships which exist among the classes 
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of schemas -— particularly whether schemas in one class may be 
simulated by schemas in aucthec: or whether thé equivalence problem 
for one class of schemas is reducible to that for another. In this 
regard, the discussions in Sections 2.3 and 6.6 should be thought of 
not as diversions, but rather as attempts to meet this objective. 

Roughly, the thesis is organized as follows: 

In Chapter II we define two Siaseas of schemas: monadie program 
schemas and iteration schemas. We show that the iteration schemas 
correspond toa class of monadic program schemas whose er 
representations possess a certain topological structure, ena that this 


class of schemas is an incomplete class of monadic program schems. 


In Chapter III we present an intuitive notion of ‘schema equivalence, 
and formalize = notion as the Sunce tons? equivalence of schemas for 
"free" {ntegprecatiqae interpretations which syabolically ‘represent 
families of related PALS TEEOUSC LONE: os argue that this is a correct 


formeldeatton of the intuitive wotiod. 


In the fourth chapter, we demonstrate that equivalence is not 
decidable for a restricted class of iteration schemas and pose questions 
about the decidability of equivalence for classes of schemas possessing 
additional restrictive properties. 

In Chapter V we show that the equivalence preblem ig solvable for 
certain classes of iteration schemas, and discuss the extensions of 


‘these results to more general classes of schemas. 


The sixth chapter is devoted to a study of the equivalence 


-15- 


problems for a particular class of structured schemas (the independent 
location schemas) and the relation of such problems to the equivalence 


problems for certain automata theoretic models. 


Finally, in Chapter VII we summarize the main points of the thesis 


and suggest areas for further study. 
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oak ae 
" CHAPTER II: MONADIC PROGRAM SCHEMAS AND ITERATION SCHEMAS 
In this chapter we define formally the classes of schemas we shall 


be concerned with, and present notions of schema interpretations and 


executions, 


2.1 Monadic Program Schemas. 
Figures 1 and 2 illustrate monadic program schemas; Figs. 3 and 4 


illustrate the schemas in flowchart form. 


2.1.1 Formal Definitions, 
The definitions given below differ in unessential ways from those 
in [16] or [18]. | 
A monadic program schema QPS) is a five-tuple S = (V, F, P, I, ©) 
where: 
V is a finite set of yariable symbols. 
F is a finite set of function symbols. 
P is a finite set of predicate symbols. 
I is a finite set of instruction labels. 


ro is the program of S, a finite sequence of instruetions of one of 
the following forms: | 
(1) An agsignment instruction of the form 
i: x@ f(y) 
or of the form 
iz: xey 
where i is an instruction label, f is a function symbol, and x and y are 


variable symbols. 


47° 


(a) V= {x,y} (b) 
F = {f,g} 
P = {p,q} 


de eee Ly e} 


Cz is the program 
i,:; xy 
ig: p(x) 13,446 
13: x £(y) 
iy: p(x) iss e 
Las Sy Gy) 
ig: ply) ite 
if = = (x) 
y © £(x) 
9° p(x) in, i, 
419, UM) Thirty 
Los Rey 
12? q(x) i,,€ 
i,g7 PG) ity 
: x © £(x) 


e: END 


FIGURE 1. Examples of Monadic Program Schemas, 


ine 
t 


= {x,y} 
= {fg} 
= {p,q} 


= fi, eee 9 lio» e} 


ey is the program 


ij: 
ty: 
i3: 


i,: 


p(x) inst, 
x + £(x) 
q(x) i,,e 

x = g(x) 
q(x) ig,iyo 
y ~ g(y) 
p(x) in,i5 
y = g(y) 


ply) 3,13 


zy - f(y) 


END 


V = {x,y,z} 


(Pp is the program: 


ij: x y 

in? p(x) iyyoi, 
ig: y ~ ay) 
i,t ply) issig 
ig: y gly) 
ig: ze £(z) 
ij: p(z) e,e 
igi yo f(y) 
ig: ze f(z) 
ity: p(z) e,e 
iyixe £(x) 
ty? ay) dyystyy 
iy! q(x) int, 
FIGURE 2, 


F = {f,g} 


oe 


P = {p,q,r} 


I 


Example of a Monadic Program Schema. 
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FIGURE 3, Schemas of Figure 1 in Flowchart Form. 


ee 
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FIGURE 4. Schema of Figure 2 in Flowchart For. 
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(2) A transfer instruction of the form 


i: p(x) ipod, 


where p is a predicate symbol, x is a variable symbol, and i, i,, and is 


t? 


are instruction labels. (We refet to i, as the true alternative of the 


instruction and to is as the false alternative. ) 


(3) A texminal instruction of the form 


i: END 
where i is an instruction label. 


We require that the program end with a terminal instruction and that 
this be the only such instruction in the program. In addition, we 
require that the label appearing as the left portion of each instruction 
be unique and that the true alternative and false alternative of each 
transfer instruction appear as the left portion of some statement in the 


program. 


Program schemas are conveniently represented in flowchart form. 
A flowchart for a schema is a directed graph whose nodes represent the 
instructions in the program of the schema. An assignment instruction 
is represented in the flowchart by a rectangle containing the righthand 
portion of the instruction; a transfer instruction is represented by an 
oval containing the center portion of the instruction; a terminating 
instruction is represented by a circle. An unlabelled arc is drawn from 
a node n to a node n' in the flowchart if n represents an assignment 
instruction in the program of the schema and n' represents the instruction 


which follows in the program. An arc labelled 't' is drawn from node n 
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to node n' in the flowchart if n represents a transfer instruction in 
the program and n' represents the instruction labelled with the true 
alternative of the transfer instruction. An arc labelled '£' is drawn 
from node n to node n' if n represents a transfer instruction and n' 
represents the instruction labelled with the falee alternative of the 
transfer instruction. A single arc, emanating from no node of the 
flowchart, is drawn to the node representing the first instruction in 


the program. No other arcs appear in the flowchart. 


Clearly, representing a schema by a flowchart provides us with no 
new information about the computation being represented. A flowchart 
is merely a convenient form for representing the control structure of 
the schem's program and facilitates discussions of certain topological 


features of the structure. 


2.1.2 Interpretations and Executions. 

We provide an iptexpretagzion for an MPS by specifying a domain D 
of individuals; total monadic functions from D into D to be associated 
with the function symbols of the schema; total monadic predicates from 
D into {true, false} to be associated with the. predicate symbols of the 
schema; and particular elements of the domain to be associated initially 
with the variable symbols of the schema. Each such interpretation 
associates an idealized computer stones with the schema and a 


corresponding execugion of the schema, defined as follows: 


We initially associate the appropriate elements of the domain with 


the variable symbols of the schema. We then execute, in the order in 
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which they are encountered, the instructions in the schema's program. 
Execution of an assignment instruction of the form "i: x f(y)! 

causes the element 9,(5) to be associated with the variable symbol x, 
where Pe is the function associated with f by the interpretation and 

5 is the element associated with symbol y at the time of the execution. 
Executing an assignment instruction of the form ‘i: x*y' causes 

the element associated with y at the time of the execution to be 
associated with x. After executing either type of assignment instruction, 


we proceed to the next instruction in the program. 


Executing a transfer instruction of the form ‘i: p(x) ipoig' 
consists of evaluating ,(o), where I, is the predicate associated 
with p by the interpretation and 0 is the element associated with x at 
the time of the execution, and then branching to the instruction labelled 
with i, or i,, according as the outcome of the evaluation is true or 
false. 

Executing the final instruction of the program causes the execution 
to terminate. If an execution terminates, the final set of elements 
associated with the variable symbols of the schema is taken to be the 
value of the schema for that execution and for the corresponding 
interpretation. (The value is undefined if the execution fails fc 


terminate. ) 


2.1.3 Free Interpretations. 
In subsequent chapters we will deal almost exclusively with a 


particular subset of the possible interpretations for a schema: the 


ey ae 


free, or Herbrand, interpretations. 
Formally, a free interpreta! for an MPS with variable symbols V, 


function symbols F, and predicate symbols P consists of: 


(1) The domain D = F*-Ay, where Ay is the set {A, | x € Vv}. 

(2) The initial association of the element 4, with each symbol 
x€V. | . | . 

(3) The assogiation of the total function P,? D~D defined as 
pp(5) = £5, 8 € D, with each function symbol £ in F. 

(4) The association, with each predicate pre p in P, of some 


total predicate ls D> (true, false}. 


We note that each free interpretation for a schema has the same domain, 
a set of strings which represent symbolically the values which may be 
associated with variable symbols during executions of the schema. In 
fact, the significance of the free interpretations is that they represent 
symbolically the set of all interpretations for a schema. In particular, 
we shall argue in the next chapter that, with regard to equivalence 


problems, we may restrict attention solely to free schema interpretations. 


2.1.4 Classes of Monadic Program Schemas. 

In this section we define three classes of monadic program schemas: 
the free schemas, the independent Location schemas, and the restricted 
location schemas. A fourth class, the structured schemas, is discussed 


in the following section. 


An MPS is free if no predicate is ever applied twice to the same 


eo 


value during an execution of the schema defined by any free interpretation 
for &. Intuitively, if S is free then either outcome is possible whenever 
we apply a predicate to a value during an execution defined by a free 
interpretation for S — the outcome is not constrained by the outcomes 
of previous applications. 

The reader may verify that the schemas of Figs. 1(b) and 2 are free, 


while that of Fig. 1(a) is not. 


An MPS is an independent location schema if every assignment 


instruction in its program is of the form 

i: x £(x) 
for some variable symbol x and some function symbol f, i.e. if the 
argument variable and the assignment variable are one and the same in 
each assignment instruction. (If we associate a location in a data 
space with each variable symbol of such a schema, these locations are 
independent in the sense that each value computed during an execution 
of the schema is stored back in the location from which the corresponding 


argument value was obtained -- hence the name independent location. ) 


The schema of Fig. 1(b) is an independent location schema; the 


schemas of Figs. l(a) and 2 are not independent location. 


An MPS is a restricted location schema if it is an independent 
location schema except, possibly, for some number of initial assignment 
instructions of the form 

i: xey 


where x and y are variable symbols and i is an instruction label which 
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is not the true or false alternative of any transfer instruction in 
the schema's program. (This last. condition ensures that such instructions 


are executed only at the start of each execution of the schema.) 


The schema of Fig. 2 is a restricted location schema, as is the 
schema of Fig 1(b). (Clearly, any independent. loeation schem is a 
restricted location schema.) ‘The schema of Fig. 1{a) is net a 


restricted location schema. 


We note here (and the reader may verify following Chapter III) that 
the restricted location schemas form an Sepmepiate sebetage of the 
monadic program schemas, and the independent location schemas form an 
incomplete subclass of the restricted Location schemas. We note also 
chat the free esate program schemas, free restricted location schemas, 
and free independent Location schemas form incomplete subclasses of the 
nionadic program sited: restricted iscneiod acheume: and independent 


location schemas, respectively. 


2.1.5 Structured Monadic Program Schemas. 


In the flowcharts of Figs. 3 and 4 there are several instances of 
an arc labelled with both 't' and 'f' cane ink from a transfer node, 
an obvious shorthand notation for a pair of arcs, one labelled 't' and 
the other labelled 'f', which terminate at the same node. In such a 
case, the corresponding transfer instruction in the represented 
program is clearly functioning as a 'GoTo' statement, necessary in a 


sequential progrem but superflous in a flowchart representation. 
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We may eliminate such transfer nodes from a flowchart after 
redirecting any arcs which terminate at such a node to the node's 
successor. We refer to the resultant flowchart as reduced, and note 
that while it may no longer represent a valid program schema, it 
never-the-less represents a computation functionally equivalent to the 
original. 

Figure 5 shows the reduced flowchart constructed from the 
flowchart of Fig. 4. It also shows the decomposition of the reduced 


flowchart into simple blocks: 


A block is a piece of reduced flowchart which has no more than a 
single exit (which may consist of many arcs that terminate at a single 
node) and arbitrarily mnay entrances. A transfer node in such a block 
is a main node of the block if it is not contained in some sub-block, 
and a block is a simple block if it contains no more than one main 
transfer node. We say that an MPS is structured if it can be decomposed 


into simple blocks, as is the case in Fig.5. 


A few words about the above definition are in order: 


Most of the results in this thesis pertain to monadic program 
schemas which are structured in such a way as to represent ‘while’ 
schemas — schemas whose programs comprise assignment instructions, 
conditional instructions, and iteration ("while" or "until") 
instructions. It has been demonstrated by Ashcroft and Manna [1] 
that any program schema may be transformed into a schema so structured, 


in such a way that its output behavior is not affected; in addition, if 
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Structured Schema. 


FIGURE 5. 


a 2oe 


the original program schema contains only monadic function and predicate 


symbols, then so does the resultant structured schema. 


Unfortunately, the Ashcroft and Manna results have, for our 
purposes, a serious drawback: the resultant ‘while’ schemas will 
contain, in general, conditional and iteration instructions containing 
compound predicate expressions, i.e. expressions composed of a number 
of simple predicates connected by boolean operators. Moreover, the 
argument variables of the predicates within a given expression need 


not be the same, and in general cannot be the same. 


If we were to define 'while' schemas in the same manner as do 
Ashcroft and Manna, we would defeat our purpose in restricting attention 
to monadic schemas in the first place, since transfer-type instructions 
would have to contain non-monadic predicate structures rather than simple 
predicates. What we have chosen to do instead is define a class of 
strictly monadic 'while' schemas, the iteration schemas of the next 
section, which correspond precisely to the structured schemas we 
have defined above. It should be emphasized, however, that unlike the 
'while' schemas of Ashcroft and Manna, the iteration schemas form a 


strictly proper subset of the monadic program schemas. 


In the following section, we formalize the notion of iteration 
schema. The correspondence between these schemas and the class of 


structured program schemas is established in Section 2.3. 
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2.2 Iteration Schemas, 


Figure 6 illustrates an iteration schema representing a computation 
functionally equivalent to that represented by the structured MPS of 


Fig. 5. 
2.2.1 Formal Definitions. 
A (monadic) itexation schema is a five-tuple 
s=(v, F, P, 5,0) 


where: 


V is a finite set of yariable symbols. 
F is a finite set of function symbols. 
P is a finite set of predicate symbols. 


x is a finite set of iteration schemas, the subschemas of S. 
re is the program of S, a finite sequence of statements of the 


following types: 
(1) Assignment statement of the form 
x f(y) 
or of the form 
xe y 
where x and y are variable symbols and f is a function symbol, 
(2) Conditional statement of the form 
IF p(x) THEN Ss. ELSE S. 


where p is a predicate symbol, x is a variable symbol (the test variable 


of the statement), and s. and S, are subschemas (the true and false 


subschemas of the statement, respectively). 


er 


S = ({x,y,z}, {f,2}, {p,q,r}, @: xy 
{S, +685}, WHILE p(x) DO S, 
y “ gly) 


IF p(y) DO S, ELSE S, 


8; = ({x,y.2}, {f,2}, {ar}, @,: WHILE q(y) Do s, 
(Si sasegee), 0.) WHILE q(x) DO S, 
7) = ({y,23, {fe}, o, o, a) B,: y ~ gly) 
ze f(z) 
S, = (fy.z}, (£1, 0, 6, B,) Po: ye £(y) 
ze f(z) 
5° Ulysse), {2,8), {2}, (,: IF r(y) THEN S, ELSE S_ 


{5,08,}, ®) 


Ss. = ({x,y.z}, {£8}, 0, 0, B) oe x ~ 8(x) 
y+ f(y) 
ze f(z) 


wn 
I 


6 > ({y,z},{£,¢), p, p, %,) Be: y ~~ gly) 
z £(z) 


s_ = ({fy,z}, {ft 0, 6, 8) Os ye £y) 
ze f(z) 


FIGURE 6. Iteration Schema Equivalent to the Schema of Figure 5. 
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(3) Jteration statement of the form - 
WHILE p(x) DO s. 
or of the form 
UNTIL p(x) DO S, 
where p is a predicate symbol, x is a variable symbol (the test yariable 


of the statement), and S. is a subscheme (the body of the statement). 


Tf S' = (v', F', P', £', @') is a subschema of S, then we require 
that V' CV, FICF, P'CP, and 5' CE. We do not permit recursion 


in iteration schemas: no iteration schema may be a subschema of itself. 


Intexpretations are defined for iteration schemas in a manner 
identical to that for program schemas. Each interpretation defines an 


execution by the schema in.a manner similar to. that for program schemas: 


We associate the specified domain elements with the variable 
symbols of the schema, and then execute sequentially the statements in 
the schema's program. New values are assocfated with variable symbols 
as indicated by assignment statements, and the programs of appropriate 
subschemas are executed in accordance with the outcomes of predicate 
applications made while executing conditional or iteration statements. 
The execution terminates when and if the execution of the final 
statement in the schema's program is completed. If the execution 
terminates, we take as the value of the schema for. the execution 
(and corresponding interpretation) the set of elements associated 


with the variable symbols of the schema at the end of the execution; 
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the value of the schema is undefined if the execution fails to 


terminate. 
Free interpretations are defined for iteration schemas as in 


% 


Section 2.1.3. 


2.2.2 Classes of Iteration Schemas. aa 

Free iteration schemas, independent location iteration schemas, 
and restricted location iteration schemas are defined in manners 
analogous to those for program schemas. 

We define two additional classes of iteration schemas which will 
be of interest in subsequent discussions: 

An iteration schema is conditional-fnee if no. conditional 
statement appears in its program, and no conditional statement appears 
in the program of any of its subschemas. 

An iteration schema is a single appearance schema if no predicate 
symbol appears in more than one statement in the collection of programs 


belonging to the schema and its subschemas. 


ee 


2.3 Structured Monadic Program Schemas and Iteration Schems: 
A Correspondence. 


We have asserted that the iteration schemas of the preceding 
section are an alternate formalization of the structured monadic program 
schemas of Section 2.1.5. In this section, we describe informally 
effective procedures for proceeding from one formalization to the other. 
Of course, we have not -yet made ‘precise the notion of schema equivalence, 
but the procedures are highly intuitive and ave correct for virtually 
any reasonable notion of equivalence. | 

It is quite an easy task to construct from an arbitrary iteration 
schema a functionally equivalent structured MPS: 

Let S be an atbitrary iteration schema and suppose that we are 
able to express each subschema of S as an equivalent ctmposition of 
simple blocks. Then we can express each statement in the program of S 


as an equivalent -composition of simple blocks, as follows: 


(1) I£ the statement is an assignment statement Or, then the 


equivalent composition of blocks is: 


(2) If the statement is a conditional statement of the form 


IF p(x) THEN S, ELSE S, 


then the equivalent composition of blocks is: 


Where Be (B,) is the 
composition of simple 
blocks equivalent to 


subschema Ss. (S,). 


— ee ee ee 


(3) If the statement is an iteration statement of the form 
WHILE p(x) DO S; 


then the equivalent composition of simple blocks is: 


Where By is the 
composition of simple 
blocks equivalent to 


subschema S i 


The last case (the statement is an UNTIL statement) is similar to 


the third. 


The structured MPS equivalent to the schema $ is formed quite simply 
by connecting sequentially the compositions of simple blocks corresponding 


to each of the elements in the program of S. 


It is now clear that we can construct an equivalent structured 
MPS from any iteration schema — we need only work from the inside 
out, i.e. we need only begin with subschemas composed solely of assignment 


statements, then those composed of these schemas and assignment statements, 


etc. 
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The reverse construction is equally streightforward: 

We begin by replacing each rectangle in the flowchart of a 
structured MPS by its contents enclosed in brackets. (The brackets 
will denote a portion of the flowchart which has been converted to 
equivalent iteration schema form.) We thea aeirge the contents enclosed 


in adjacent brackets, i.e. y becomes i 
pee A 
$ , 


When we have completed this merging, either the entire flowchart 
will consist of a bracketed expression (followed by an END node), in 


which case we have completed the construction, or the flowchart will 


contain structures of the form: 


or of the form: 
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We replace the first type of structure with: 


where Sq becomes the subschema 
[zr p(x) THEN Sq ELSE Sg ] with program a, and Sg becomes 


the subschema with program B. 
and the second with: 


fwarLE p(x) DO Sq | if b is 't', or [unr p(x) DO Sq] if b is 'f£', 


where Sq becomes the subschema with program @, 


This procedure is repeated recursively until the entire remaining 
"flowchart" consists of a single bracketed expression followed by an 
END node. In such a case, the expression in brackets is the program of 
the iteration schema equivalent to the original structured program 


schema, with subschemas as given above. 


2.4 Incompleteness of Iteration Schemas. 

Our reason for selecting iteration schemas as the primary 
computational model of the thesis is that we wish to deal with 
equivalence issues for a class of schemas less "powerful" than the 
class of monadic program schemas, but still general in its ability to 
represent computation. Iteration schemas clearly satisfy the latter 
criterion, but we might question whether they satisfy the former. 
Clearly there exist monadic program schemas which are not structured, 
but do the structured schemas represent a complete subset of the 
monadic program schemas? In particular, we might ask if the presence 


of boolean operators is really essential for the simulation of arbitrary 


moe ee 


MPS's by 'while' schemas, or whether any MPS may be simulated by an 
iteration schema. 

In this final section of the chapter, we demonstrate that such 
operators are indeed essential for the simulation of arbitrary MPS's 
by 'while’ schemas. (In the following chapter, we define formally 
schematic equivalence. For the purpose of the féliowine discussion we 
state that a pair of schemas are not equivalent if there exists an 
interpretation for the schemas such that the execut ion of one schema 


terminates, while that of the other schema fails to terminate. ) 


_ Consider the MPS of Fig. 7({a), It is intuitively obvious 
(and can be derived immediately from results in [14] ) that if S is 
equivalent to some iteration schema, it is.equivelent to some iteration 


schema which has predicate symbols {p,q} and function symbols {f,g}. 


We note that an execution of 8S is guaranteed to diverge if it is 
defined by an interpretation in which the predicate associated with p 
and that associated with q are each identically true. Let I denote the 
free interpretation which satisfies this condition. 

Now, suppose that there exists an iteration schema S' equivalent 
to S. S' must contain at least one WHILE statement 6 containing one 
of the predicate symbols, say p, such that s is executed during the 
execution of S' defined by I. Let D denote the domain of I, and let X 


denote the set of elements of D at which the predicate associated with q 


«39. 


(a) S: 
(b) 
IF p(x) THEN |x « f(x) ELSE [x @ f£(x) 
yor yer 
WHILE (p(x) q(y)) DO [x «+ f(x) 
yor 


IF p(x) THEN i - | ELSE ; - o 


yor yrs 


FIGURE 7. Unstructured Schema and Equivalent 'While' Schema With 
Boolean Operators. 
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is evaluated prior to the first execution of statement s. Let I' be the 
free interpretation differing from I only in that a is associated with 
q, where 1," is the predicate defined as follows: 

To * true, 6 € X 

H'@) = false, &§£X 
The execution of S' defined by I' clearly cannot texminate since the 
behavior of S' for I and I' is identical until statgment s is executed, 
whereupon s’ must diverge because the predicate magdetated with p is 
identically true. But the execution of S will terminate as soon as T,' 
is evaluated at an element of (D-X), and since X is finite and I' is a 
free interpretation, Ti," must eventually be evaluated at an element of 


(D-X), contradicting the equivalence of the two schemas. 


A 'while' schema containing boolean operators is shown in part (b) 
of Fig. 7; the reader may verify that this schema is equivalent to the 


schema S, 
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CHAPTER III: EQUIVALENCE 


3.1 Equivalence — Introduction. 

Intuitively, we wish to consider a pair of schemas equivalent if and 
only if the value of each schema is the same whenever both schemas have 
been provided with the same interpretation. This notion of equivalence 
is rather strong. In particular, it is a much stronger notion than 
would be desirable if we intended to apply schematological results to 
interpreted models, since it provides no mechanism for the specification 
of any relations which might exist among the functions and predicates 
comprising the schema primitives. But this is precisely what makes it a 
logical notion of schematological equivalence: equivalent schemas are 
required to exhibit the same "black box" behavior, i.e. they are required 
to exhibit, for each interpretation, the same output behavior, with no 


constraints on their internal behavior. 


The notion of equivalence as we have presented it does, however, 
have a serious drawback: it makes sense only if applied to pairs of 
schemas which have the same sets of predicate symbols, function symbols, 
and variable seehate: This is indeed unfortunate, since we would 
certainly like to consider the schemas S and S' of Fig. 8 equivalent, 
despite the fact that S' contains a function symbol and a predicate 
symbol not contained in S. Likewise, we might wish to add variable 
symbols to a schema in order to remember intermediate values during an 
execution, without considering the affects of these new symbols on the 


resultant schema value. (In fact, the addition of such variable symbols 


ery ae 


S= ({[x,y], {£}, 0, 0, P) 
where Y ist 29 EGS) 


y+ f(x) 


s' = ({x,y}, {£8}, {p}, {S,,59}, O) 
where Ss! is: x + £(x) 
yor ey) 


IF p(y) THEN S, ELSE S, 


L 
and 8, = ({x,y}, {£}, 0, 0, P) 
where v, is: EC) 

and S. = ({x,y}, Leh, Q, D, ee) 
where B, is: y* x 


y + f(y) 


FIGURE 8. Equivalent Schemas With Distinct Sets of Predicate Symbols 


and Function Symbols. 
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is necessary, in general, if one wishes to transform an arbitrary MPS 
into an equivalent 'while' schema in which boolean operators are 


permitted. ) 


We may handle the problem caused by schemas with distinct sets of 
predicate symbols and function symbols by considering extensions of 
interpretations. If we permit an interpretation for a schema to 
associate predicates and functions with symbols which do not appear 
in the schema, we may extend any interpretation in such a way as to 
provide an interpretation for some other schema. If we begin with 
consistent interpretations for a pair of schemas (i.e. interpretations 
which do not associate distinct functions with a common function symbol 
or distinct predicates with a common predicate symbol), then we may 
easily construct an interpretation which is an extension of each of the 
interpretations. Thus we may consider a pair of schemas to be equivalent 
if, whenever they are provided with consistent interpretations, the value 


of the schema for its interpretation is the same in each case. 


The problem posed by pairs of schemas with distinct sets of variable 
symbols could be handled quite easily by adding a sixth component in our 
definition of schema — a subset of variable symbols which would be 
considered output symbols, symbols whose values at the end of an 
execution would comprise the value of the schema for that execution. We 
prefer to live with the shortcomings of our present notion, however, 
rather than introduce such a component, since the presence of non-out put 


symbols in the schemas would add in unessential but tedious ways to the 
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complexity of certain proofs in subsequent chapters. Also, we would 
not gain much by ite introduction, since most results concerning the 
decidability of equivalence for classes of schemas with "total output" 
imply the same results for corresponding classes of schemas with 
specified output symbols. In particular, suppose we have a pair of 
schemas with a common set of output symbels, plue some. other variable 
symbols which may be different in each case. We can add additional 
variable symbols to each schema to ensure that the set of such symbols 
is the same in each case, and then.add to the end.of each program the 
statement ‘x y', for each non-output symbol x and. sme. specified. 
output symbol y. Clearly, the resultant schemas will be equivalent in 
the sense we have proposed if and only if the original schemes are 
equivalent when attention is restricted to particular output symbole. 
Earlier we defined the class of free interpretations for schems, 
and noted that each free interpretation represents symbolically a family 
of closely related interpretations. It would: be quite convenient if we 
could restrict attention to free interpretations in our discussions of 
equivalence, since such interpretations have several desirable 
properties. For one thing, all free interpretations for a schema have 
the same domain and interpret each function symbol in the same manner. 
Hence, we may specify a free interpretation solely by specifying the way 
it interprets predicate symbols. Also, during an execution defined by 
a free interpretation for a schema, identical values may be generated 
only if they are generated via precisely the same sequence of function 


applications, and the value itself makes explicit this sequence. In 
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addition, the application of a function toa value during such an 
execution must result in a git cerent aa and this value must be 
longér than the original when vigged as a string 6e. symbols, This 
last property is particularly significent when dealing with restricted 
location schemas, since it implies that ‘the sequence of enlace associated 
with any variable symbol during such an execution will bea sequence of 
strings of strictly increasing length, -each ‘a “proper suffix of the next. 
Finally, and perhaps most importantly, we can ‘exploit the property of 
freeness in a schema only if we are dealing with executions of the . 
schema under frea ‘interpretations. 

Fortunately, it is easy to show that a pair of ‘schemas are 
equivalent for all interpretations if and only 4f they are equivalent 
for all free interpretations. It is only necessary to show that if 


Histrate the’ ron- 


there exist consistent interpretations which’ dem 
equivalence of two cca, then the free interpretations which: 
represent them symbolically are also consistent’ and also demonstrate 

the Gon-eauiie lense of the schema... The proof of the first part of the 
statement is trivial; the proof of the second pert is by induction on 
the lengths of the final values of variables for the executions defined 
by the free interpretations, and is.also straightforward, The reader 


is referred to [14] for details. | 
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3.2 Strong Equivalence -— Definition. 


We term the notion of equivalence we have just discussed strong 
equivalence, since it is strong enough to imply most other reasonably 


defined forms of equivalence. Formally: 


Let I be an interpretation for same schema, and let D be the 
domain of the interpretation. Let F be a set of function symbols and 
Pa set of predicate symbols which are not interpreted by I. Then a 
(2,F)-extension of I is the object formed by adjoining to I, for each 
symbol p in P, a total predicate H: D + {txzye,fakge}, and for each 


symbol f in F, a total function Pe? D7 D. 


Let 5) and &, be arbitrary schemas with possibly distinct seta of 


2 
function or predicate symbols. Let F, and P, denote the sets of 
function symbols and predicate symbols, xespectively, which appear in 
a but not in cy Similarly, let F, and Py.denote the sets.of function 
symbols and predicate symbols which appear in S, but not in 5,. Then 


an interpretation oT for S_ is consistent with an interpretation I, for 


1 
sy if some (P,,F, )-extension of I, is a (P,,F,)-extension of I,. 

A schema S, is strongly equivalent to a schema S, if the value of 
S, for a free interpretation I, is the same as the value of S, for a 
free interpretation To? whenever I and I, are consistent. 


Unless otherwise noted, equivalence shall refer to strong 


equivalence in the remainder of this thesis. 
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3.3 Weak Equivalence — Definition. 


Several other notions of equivalence have been proposed in the 
literature, one of which will be of interest later when we explore the 
way in which equivalence problems for structured and unstructured 


independent location schemas are related: 


Schemas a and So are weakly equivalent if the value of Ss for an 
interpretation I, is the same as the value of 7) for an interpretation 
Io; whenever oT and I, are consistent free interpretations and both 


values are defined. 


It should be noted that weak equivalence is not, in fact, an 
equivalence relation. In particular, the relation is not transitive 
since any pair of schemas are each equivalent to one whose executions 


diverge regardless of interpretation. 
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CHAPTER IV: UNSOLVABLE PROBLEMS 


Luckham, Park, ae Paterson have demonstrated in [16] that the 
equivalence problem for otic program peheuae is recursively 
unsolvable. Briefly, thay have demonstrated that the achemas are 
capable of simulating two-head finite automata, and have noted that 
the equivalence problem for the atitomata was shown unsolvable in [25]. 
The schemas which they constructed to simulate the automata were 
independent location schemas except for an initial assignment instruction 
of the form 'x ™ y' (which corresponda to the placing of both heads on 
the tape of an automaton): andwe have, therefore, that equivalence is 
undecidable for restricted location monadic program sehemas. — 

The example in Section 2.4 demonstrates that restricted location 
iteration schemas are strictly less powerful than restricted: location 
MPS's. Moreover, it can be shown (cf, [13]) that there exist restricted 
location MPS's which cannot be simulated by restricted location 'while' 
schemas, even if we permit boolean expressions in conditional and 
iteration statements. (Informally, the reason we cannot, in general, 
construct such a simulating schema. is that the flowchart of an arbitrary 
restricted location MPS may contain a directed cycle with many different 
exits. To place such a cycle in 'whilish' form requires merging all of 
these exits into one, and "remembering" the values of relevent variables 
at points in the new cycle which correspond to the exit points in the 
original cycle. When the merged exit is taken, the correct values may 


then be associated with each variable symbol, based on which of the exits 
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would actually have been taken in the original flowchart. The 
appropriate values are remembered by assigning them to new variable 
symbols, and it is precisely these assignments which prevent the 
resultant schema from being a restricted location schema, since they 
must be made within the cycle at points corresponding to the original 


exits.) 


It is clear, therefore, that structured restricted location 
schemas are significently less powerful that restricted location 
schemas in general, and we might hope that the added structure is 


sufficient to render equivalence decidable for such schemas. 


Unfortunately, this does not prove to be the case. In fact, we 
are able to prove that equivalence is undecidable even if we look at 
restricted location schemas which are "totally" structured — those 


in which even conditional statements have been removed. 


In this chapter we prove that equivalence is undecidable for 
restricted location iteration schemas, and that it is also undecidable 
for such schemas which are Chait tanaeeene For lucidity, we present 
the result for the more general class of schemas first, and then discuss 
the way in which the procedure may be strengthened to establish the 


result for the conditional-free schemas, 
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4.1 Post's Correspondence Problems. 


We begin by considering two well-known unsolvable problems: the 


Post Correspondence Problem and the Modified Post Correspondence Problem. 


A Post Correspomtence Problem is an ordered pair 
Cc = (A,B) 
* 
where A = Lo w sears a lsis<k, 4, Y, € {0,1} 
B= {¥ys Yoo eee » v3 
and W = 8, °S, * se. °8 s; ,r, € {0,1} 
i, "4 i + ie 


Yi = Ta "1," eee “hg, 


We say that the Post Correspondence Problem C has a golution if 
and only if there exists a sequence of integers Ljereesl m2il, 
lsi sk, 1s nsSm, such that 


WD « We e Ww. = Ye Y "eee * ¥ 
4, 4, 


tn 


A Modified Post Correspondence Problem is a pair (C,2), where C 


is a Post Correspondence Problem as above, and £ is an integer, 1s £< k, 


We say that the modified problem has a solution if and only if there 
exists a sequence of integers ij,-++,i)5 m20, ls i, = k, lsnsn, 


such that 


It is recursively undecidable whether a given Post Correspondence 
Problem or a given Modified Post Correspondence Problem has a solution. 


(See, for example, [8 ].) 


i IER SI INR Stern IS ones BRS 
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4.2 A Note on Notation. 


We will generally define schemas in terms of their: programs and 
the programs of their subschemes only, the. function; predicate, and 
variable symbols being defined implicitly as these appearing in the 
programs. In most cases, in fact, we will not bother to distinguish 


between a schema and its program, referring to either as "schema". 


When convenient, we will paimdti delpeeak: boolean expressions to 
appear in conditional statements of an iteration schema. We note | 
that 

IF (™b) THEN S, ELSE-S,. 
for any boolean expression b is equivalent to 


IF b THEN Ss 


. ELSE s. 
and that 
IF (bV b') THEN S, ELSE 5; 


for any boolean expressions b and b' is pe iNane rene to 
IF b “THEN s. ELSE s' 
where S' is 


IF b' THEN S, ELSE S. 


and we are assured, therefore, that permitting boolean expresaions in 
conditional statements is indeed a notational convenience, and does not 
in any way diver the class of - computations representable by iteration 


echéemas. 
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4.3 Undecidability of Equivalence for Restricted Location Iteration 
Schemas. 
Let C be a Post Correspondence Problem as defined in Section 4.1. 
_We show how to construct a restricted location iteration schema § with 
the property that some free interpretation I defines a terminating 


execution of S if and only if the: problem ¢ has a: solution. . 


Let S, be the iteration schema whose program is empty, and let s, 
be the schema: 
WHILE p(x) DO S, 


UNTIL p(x) DO Sp 


for some predicate symbol p and some variable ‘symbol x, That is, S, is 


a schema for which each interpretation defines a non-terminating execution. 


Let Po and Py be distinct predicate symbols different from p, and let 
So be the schema: . 
IF (Pp) (x) A (7p, (x))) THEN s,. ELSE S, 
and let 31 be the schema: 


IF (p,(x) A (7p, (2) THEN S, ELSE S, 


Suppose we interpret the predicate symbols p, Pos and p, over some 
domain D. We may consider an element of the domain ‘ig presenting the 
symbol '0' if, when this element is initially sascctatad with syabol x, 
the execution of So defined by the interpretation terminates. Similarly, 


we may consider the element as representing the symbol '1' if, when the 


element is initially associated with x, the execution of S defined by 


ae ee 


the interpretation terminates. Viewed in this way, no element of D may 


represent both '0' and '1', although some elements may represent neither 


symbol. 
For each i, 1 S isk, let A, _ be the schema: 
i 
IF q(x) THEN S, ELSE S$ 
i t 
x @ £(x) 


IF q(x) THEN S. ELSE S 
i, t 
x * £(x) 


IF q(x) THEN Se ELSE S, 
aon 
x + £(x) 
(In the above, q is some new predicate symbol and Ss, denotes, for each 
j, the schema So or the schema Si» according as *4, is 0 or 1.) 

In this manner we associate a schema with each string of symbols in 
the first component of the problem C. If we provide an interpretation 
with some domain D for the schema Ay , then the execution of Aw 
defined by the interpretation will divert unless the sequence of yohete 
represented (in the way déscribed above) by the elements v, PCy), 
PC v)), ree ot ty) comprise the string a where v € D is the 
value initially associated with x and Pe? D7 D is the function | 


associated with f by the interpretation. The execution will also diverge 


if any evaluation of the predicate associated with q has outcome false 
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during the execution. (The reason for the inclusion of q in the schema 


will become apparant later. ) 


Let Sy! be the schema identical to So 


in place of variable symbol x; let 5! be the scheme identical to 3, 


except with variable symbol y 


except with y in place of x. 


For each i, 1 s i < k, let By be the schema: 
i 


IF q(y) THENS ' ELSE S 


t 
i, 


y @ f(y) 
IF q(y) THEN S. ' ELSE S, 


i 
2 
y ~ f(y) 


° 
° 


IF q(y) THENS ' ELSE S, 
Py 
o 
y ~ f(y) i 
(In the above, Sy, ' denotes, for each j, the schema S,' or the schema 
J 


Si'; according as r, is 0 or 1.) 
se | 


These schemas correspond to the strings in the second component of 
C in the same way as those defined previously correspond to the strings 


in the first. 
For each i, 1 <i<k, let Ry be the schema: 


IF t,(z) THEN Aw ELSE S 


F LS 
i t,(e) THEN By, ELSE R, 4, 
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where each t. is a distinct new predicate symbol. 
Let R, be the schema: 

IF t,(z) THEN Ay, ELSE S., 

IF t, (z) THEN By : ELSE R, 


z@ £(z) 
and let R, be the schema: 


IF t,. (2) THEN Aw, ELSE Se 


IF t,.(z) THEN By ELSE S, 
Finally, let S be the schema: 


y* x 


IF p,(z) THEN R, ELSE R, 


WHILE p,(z) DO Ry 
IF q(x) THEN S, ELSE S,, 


t ELSE Si 


IF q(y) THEN S 
We claim that some execution of S under a free interpretation will 
terminate if and only if the Post Correspondence Problem C has a 
solution. In particular, suppose that some such execution of S 
terminates. Let n denote the number of times during the execution of 8 
that the subschema R, is executed, and let beg ty p 080 9 a be the 
2 


n 
sequence of t's whose applications resulted in true outcomes during the 


executions of R- It is clear from the construction that the value of 


m. 
x at the end of the execution of S must be f ae where m, = 


WW, 2 6. °W, ly and that the value of y at the conclusion of 
Jy J2 Jn 
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the execution must be £ 2A » where m, = | Y; a a ee A L. 
i Jy dn jn 

Also, the sequence of symbols represented by ee alenens* 

4,5 £eAgs cee s rz “A, must comprise WO = ne a jae * “hn 


otherwise the execution of S would have eacel at the execution of 

some subschema Ae. when it was discovered that the wrong symbol, or 

no symbol at all, was represented by an element. Similarly, the 

sequence of symbols represented by A> f-A,, eek fA must 

comprise Y = ¥ ea 8 eee: SOY and. therefore it/tmust be the case 
1 jo Jn 

that © is a prefix of Y, or vice versa. 


But it must also be the case that m, and m, are’ identical: 


The value associated with x is tested with the predicate 
corresponding to symbol q each time a statement of the form 'x - £(x)' 
is executed, and similarly for the values associated with y- In each 
case but the last the outcome of the test is true, pekewwiee the 
execution would have diverged. Now, suppose thet m, “and m, are not the 
same; in particular, suppose that m, > m,. “It must be the case that 
Of 7A x) is Syue (where: Hy is the predicate associated with-q). But 
then the execution of S would have diverged when the fifth statement in 


its program was executed, a contradiction. ng ma). 


But then it must be the case that & = Y, and thus iy poe? as 


must be a solution to the correspondence problem C. 
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The remaining argument, that some execution of S under a free 
interpretation terminates if C has a solution, is also quite easy. 
Suppose that i eee oi. is a solution for C. Then we provide S 


with the free interpretation that associates with Py the predicate: 


I (£°°A ) = true if the (ntl)st symbol of %, + ... °° 
Po x 1y A 


is 0, or false otherwise 


that associates with Py the predicate: 
n 
I, (f -A,) = true if the (ntl)st symbol of Wt eee 8 W 
i 1 


is 1, or false otherwise 


that associates with q the predicate: 


n 
Il ¢£ "A ,) = false if n= | oe afew as am > or true 
otherwise 


that associates with t_, 1 < j = k, the predicate: 
J 


n 
ql (f£ -A ) =true if j =i _, 1 <n<nm, or false 
ty re n+1 — 


otherwise 


that associates with P, the predicate: 


n 
I, (f£ "A,) = true if n <m, or false otherwise 
I 
and that associates with p an arbitrary predicate. 


The reader will verify that the execution of S defined by the above 


interpretation is guaranteed to terminate. 


From the above construction we have: 
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Theorem 4.1: 
The equivalence problem for restricted location iteration schemas is 


unsolvable. 


Proof: Suppose that the equivalence problem were solvable. Given an 
arbitrary Post Correspondence Problem C we could construct a 
restricted location iteration schema S as outlined above. The 
correspondence problem would have a solution if and only if 
S were not equivalent to the schema re and we would therefore 
be able to decide if C has a solution, contradicting the known 


unsolvability of Post's Correspondence Problem. 
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4.4 Undecidability of Equivalence for Conditional-Free Schemas. 


In this section we describe how a conditional-free, restricted 
location schema may be constructed from an arbitrary Modified Post 
Correspondence Problem in such a way that some execution of the schema 


terminates if and only if the correspondence problem has a solution. 


Let C be an arbitrary Post Correspondence Problem as defined in 
Section 4.2, and let C' = (C,£) be a modified correspondence problem, 
where £ is an integer between 1 and k, inclusive. We begin by modifying 


some of the subschemas of the preceding section: 


We note first that the schema So is equivalent to the conditional- 
free schema: 
UNTIL Po) DO S.. 


WHILE p, (x) DO S, 


Similarly, the schema Ss) is equivalent to: 


UNTIL p, (x) DO S, 


WHILE po(x) Do s, 
For each i, the subschema Bas consists of assignment statements 
and conditional statements of the form: 
IF q(x) THEN See ELSE s. 
Clearly, we may replace each such Sondic tdual “abateonke with the 


statement: 


UNTIL q(x) DO S. 


followed by the sequence of statements which makes up the program of the 
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subschema S, . Hence, each such schema Ay can be transformed into 
i, i 
J 

a conditional-free schema. In a similar manner, each subschema of the 


form By A 


can be transformed into a conditional-free schema. 
For each i, 1 Sisk, let dD, be the schema consisting of the 
statements of the schema A, , followed by the statements of the schema 
i 
By., followed by the statement: 
i 


ze f(z) 


Each dD, can be made conditional-free by using the conditional-free 


schemas equivalent to Ay and By - 
i i 


Let R be the schema 
WHILE t,() DO Dy 


WHILE to(z) DO Dy 


W 
HILE t, (2) DO ie 


Finally, let S' be the schema: 
yes 
at 
B 
WHILE p, (2) DOR 
WHILE q(x) DO Sp 


WHILE q(y) DO S, 


where Q@ is the sequence of statements which makes up the schema Aw» 


a ae 


and B is the sequence of statements which makes up the schema Bey: 
Since each of the component schemas of S' is equivalent to a 
conditional-free schema, S' may certainly be made conditional-free. 
The reader may verify that some execution of S' defined by a free 
interpretation for the schema terminates if and only if the problem 
C' has a solution. (The argument is virtually identical to that 


given in the previous section. ) 


Thus we have: 


Theorem 4,2: 
The equivalence problem for restricted location, conditional-free schemas 


is unsolvable. 


Proof: The decidability of equivalence for such schemas implies the 


solvability of the Modified Post's Correspondence Problem. 


O 


4.5 Discussion. 


The schemas of Theorem 4.2 are a rather restricted class of monadic 
program schemas, more restricted than any class for which the equivalence 
problem has previously been shown unsolvable. This is not actually 
surprising, however, since the effort which has been expended in the 
study of equivalence problems for schematized models has been directed 
primarily towards finding broad classes of such models for which 


equivalence is decidable, rather than restricted classes for which it is 


amy ae 


not. The paucity of results which have been obtained to date, however, 
suggests that perhaps both directions should be explored, if only to 
gain some insight into the types of restrictions which are apt to lead 


to solvable problems. 


In a modest way Theorem 4.2 provides us with some such insight, 
since it demonstrates that structure, or the lack thereof, is not in 
itself a key to equivalence problems in monadic program schemas. We are 
led to inquire, therefore, whether structure, taken in conjunction with 
other reasonable restrictions, might lead to solvable problems, or 
alternatively whether the constructions of the previous sections can be 
strengthened to yield results analogous to that of Theorem 4.2 for yet 


more restricted classes of schemas. 


For example, what is the effect of restricting the number of 
distinct symbols in the schemas? The schemas in the construction of 
Section 4.4 employ only a single function symbol, but arbitrarily many 
predicate symbols, At the cost of some lucidity, however, we could 
present a construction involving schemas with a single function symbol 
and a single predicate symbol (see Appendix A), and thus restricting 
the number of predicate and function symbols helps us little in our 
quest for solvable problems, even if dealing with totally structured 
schemas, Matters are slightly different with naenete to variable 
symbols, however: while it is an easy matter to present a construction 
employing only two variable symbols (we merely use x or y in place of 2), 


no further reduction is possible in the construction, since the 


equivalence problem for schemas with a single variable symbol reduces 


to. that for finite state automata.: : 


Prompted in part by interesting results fOr certain | interpreted 
models for computation 17, 28], we might ask about the effect of 
limiting the number of levels of iteration in structured schemas. We 
mote, for instance, that the construction of Section 4. 3 employs schemas 
with two levels of iteration, while that of Section rs 6 employs schemas 
with three levels. Is equivalence decidable for structured schema s with 
one level of iteration? Is éauivalence decidable pia coadtetonais free 
‘schemas with two levels of iteration? (Both of these questions are 
open. It is known, however, that equivalence ‘is decidable for 
conditional-free schemas with a single level of iteration, since these 


schemas are a subclass of the seat igor tees ee tarts [18].) 


Other restrictions we eeuptienne follow from che observations that 
he schemas in the previous ‘sections are not free; “that they are properly 
restricted location, as opposed to independent Location; and that certain 
prenicere letters appear in several statements in che schemas. We might 


ask, therefore: 


independent location schemas? Which are usta lecapecaniaes aaeuaee Which 


possess various combinations of these properties? 


Answers to some of these questions are presented in. the following 


chapter. 


CHAPTER V: SOLVABLE PROBLEMS 


In this chapter we provide affivmative ‘answers to some of the 
questions raised at the end of Chepear a The anes Wes we amply 
are hardly generalizable to non-st ructured schemas, but we are confident 
that they are t applicable to classes of structured schemas more general 


than those we consider in this chapter. We are concerned, therefore, 


with illustrating these techniques: as well as with obtaining specific 


results. (The first case we consider, for emmple, is perbars rather 


‘more pedantic than theoret ically tnteresting. ) 


Briefly, the appcouck is as follows: 2 

We demonstrate that for certain classes of schemis it is possible 
to find iteration statements in pairs of equivalent schemas which play 
similar roles during consistent schema executions, i.e. statements which 
execute the same number of times and test the same values during such 
executions, and which affect in a oimieee manner the variable syapole in 
each schema. Given an arbitrary pair of ochenns in the class, we 
identify statements which must be so related if the schents are equivalent, 
and use their assumed similarity to educa: the equivalence of the schemas 
to that of simpler schemas, a procedure which is applied recursively 
until the problem has been reduced to that for schemis whose equivalence 
is trivially decidable. | 

The approach is illustrated in Section 5.5, after formalizing the 


notion of "similar roles" and presenting some preliminary results. 
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5.1 Test Sequences and Logic Equivalence. 


Let S be an iteration schema with predicate symbols P, and let D 
be the domain of the free interpretations for S. Then the set of tests 
for S is the set D x P, 

Suppose that s is a conditional or iteration statement in S and 
that E is a free execution of S (that is, an execution defined by a free 
interpretation for S). Then a test T = (5,p) is said to be made at s 
during E if the predicate assigned to symbol p by the interpretation 
defining E is evaluated at the expression 5 during the execution of 
statement s. (The application must be made during the execution of the 
statement itself, rather chan during the execution of the subschema 
appearing in the statement.) We denote by TESTS(s,E) the sequence of 
tests made at s during E, and by TESTS*(S.E) the sequence of all tests 
made during E (including those made during the execution of statements 


in subschemas of S). 


Let E and E' be executions of iteration schemas S and S', 
respectively. We say that E and E' are consistent if they are defined 
by consistent interpretations for the schemas. Let s be a conditional 
or iteration statement in S, and let s' be a conditional or iteration 
statement in S'. Then s and s' are logic equivalent if TESTS(s,E) = 
TESTS(s',E') whenever E and E' are finite, consistent executions. 

Later in this chapter we show that for certain classes of schems 
logic equivalent statements must appear in equivalent members of the 
classes. In fact, the existence of such statements forms the basis of 


our proofs of the decidability of equivalence for these classes. 
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5.2 Productivity and Essentiality. 


It would be naive to assume that equivalent schemas need make 
precisely the same tests during consistent executions, since some of 
the tests made during the executions may be non-productive tests -— 
that is, tests whose outcomes do not affect the resultant values of the 
schemas. For example, the value of the schema in Fig.9 for any execution 
is independent of the outcome of the test made at the statement labelled s. 
Since s is the only statement in which symbol q appears, it is clear that 
no test of the form (5,q) made during an execution of S can be productive. 
Hence, the value of S will be the same for any pair of interpretations 
for the schema which differ in the way they interpret q, and we say, 


therefore, that q is an inessential symbol of S. 


As might be expected, it is undecidable in general whether a given 
predicate symbol is essential in an iteration schema. In particular, if 
it were decidable we could easily decide whether or not arbitrary 
iteration schemas aT and 25 were equivalent: they would be equivalent if 


and only if p were inessential in the schema 
IF p(x) THEN 5, ELSE 5, 


where p is a predicate symbol not appearing in Sy or Sy» and x is an 
arbitrary variable symbol. 
Fortunately, the fact that essentiality is not decidable does not 


preclude us from using the notion to advantage, since essentiality is 


assured for symbols of particular interest to us later in the chapter. 


S67 3 


Ss = ({x,y}, Lise ts {q}, {$,.5,], Y) 


where Y is: 


S, = C(ix.yh [fe], 


where 0, is: 


So = ({xsy}, Lae 


where a is: 


FIGURE 9. 


: IF q(x) THEN S 


x y 


1 ELSE sy 


y + f(y) 


0, 0, Q) 


x 7 £(x) 
KO g(x) 


y iG) 
do, 0, %,) 


y ~ f(y) 
xy 
x + g(x) 


yor 


f(y) 


Schema With Inessential Predicate Symbol. 
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5.3 Additional Definitions and Terminology. 
5.3.1 Definitions. 


Let S be an iteration schema and let k be the maximum number of 
distinct iteration statements executed during any execution of S. Then 
we say that S is a schema of size k. (While this notion of sles is 
certainly not the most intuitive, it shall prove quite useful in 


subsequent discussions. ) 


Let T be a test for an iteration schema 5, and let E be a free 
execution of S. Then T is free with respect to E if T ¢ TESTS*(S,E). 
(Intuitively, a test is free with respect to an execution if the outcome 


of the test is not fixed by the execution.) 


Let S be an iteration schema. Then the set of main statements of S 


is defined recursively as follows: 


(i) If s is a statement in the program of S, then s is a main 
statement of S. 
(ii) If s is a main conditional statement of S and s' is a statement 
in the program of the true or false subschema of s, then s' is a main 


statement of S. 


Let s be a conditional or iteration statement in a schema S. A 
variable is said to be modified at s if, for some execution of the schema, 
the value associated with its symbol immediately prior to an execution of 
s is different from that associated with the symbol immediately following 


the execution of s. A variable is said to be active in s if it is the 


test variable of s, or it is the test variable of some statement in the 


oe ae 


subschema(s) appearing in s; otherwise, the variable is said to be 


passive in s. 


5.3.2 A Note on Terminology. 

We shall often want to modify schema interpretations in such a way 
as to obtain executions differing in ‘icine respect from those. defined by 
the original interpretations. For convenience, we shall generally 
express such modifications in terms of the executions themselves, rather 
than in terms of the defining interpretations. Im particular, we shall 
often refer to obtaining a new execution from seme given execution by 
changing the outcomes of particular tests, whereas what is actually 
meant is that we may obtain the new execution by changing appropriately 


the interpretation defining the original. 
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5.4 The Elimination Theorem. 

In [24], Rodriguez studied the equivalence problem for program 
graphs, a scien Ciwea model for parallel commutation, and “proposed | 
that one might decide the equivalence of a peir of such graphs by 
exmining their behaviier fer consistent: hage amecutions, executions 
in which no cycle of either greph is executed more than once. | 
Unfortunately, the preposed approach will not work if applied to our 
models: it is an easy taek to construct.a.peit ef iteration schemes 
which are not equivele nt, but whieh heave diécaiek aloe fer all 
consistent executions in whieh the bedy ef no itemetion stanement is 
executed more than once. 

For example, let S be the schema 

x ~ £(x) 
WHILE p(x) DO s, 
x @ £(x) | 
x = f(x) 
WHILE p(x) DO a 
where s, is the schema ty - f(x)', and let S' be the schon 
x @ £(x) 
xe £(x) 
UNTIL p(x) DO s 
x @ £(x) . . 


WHILE p(x) DO s, 


Pa ee 


The reader may verify that S and S' have the same value for all 
pairs of consistent executions in which no instance of Ss) is executed 
more than once. But S and S' are clearly not equivalent, since if I is 
the free interpretation which assigns to p the predicate qy defined as 
follows: 

I,(f-A,) = false, 0<is4 
T(f*A,) = true, i> 4 
then the execution of S defined by I terminates, vhile that of S' must 


certainly diverge. 


However, it is possible to show that if a pair of ieeraties schemas 
satisfy certain conditions, then they must contain a pair of ieatatiog 
statements such that the schemas are equivalent if and only if they have 
the same values for all consistent executions in which the bodies of 
these statements are executed no more than once. This implies that we 
can decide the equivalence of such schemas by deciding the equivalence 
of two pairs of schemas which are “simpler" than the originals in the 


sense that they contain fewer iteration statements: 


(1) the schemas obtained from the originals by eliminating these 


particular iteration statements from their respective programs; and 


(ii) the schemas obtained from the originals by replacing these 


iteration statements with their bodies. 


Moreover, if we can ensure that the resultant pairs of schemas 


satisfy the same conditions as the original pair, we can repeatedly 


9D 


eliminate iteration statements from successive pairs of schemas until 
we have reduced the equivalence of the original schemas to the | 
equivalence of some bounded mmmber of pairs of schem’s which contain 
no iteration statements (and for which equivalence ‘ts trivially 
decidable). Thus the conditions for which such iteration statements 


are guaranteed to exist are of considerable interest. 


The conditions are explicated in Theorem 5.1 in this section, 


after a preliminary result: 


Let X, Y and Z be sets of words over same piobetet T. Let fy : = + ." 
and f. x~ r be total functions, aa let fo: y* ” . be a total 
function saa that for each 6,0 € y* we have £9(6)° £,(0) = | £2(6°0). 


Let @EX and let Y € Z, and suppose the following equilities hold: 


lh y°Q = £,(4)+£,(0) 
2. YRea= £,(2) + £,(8 )-£,(%), all BEY 

Then YeB-O = £,(4).£(B)+£,(2), elif ex. 

Proof: We know from (1) and (2) that the assertion is correct if B 
is the empty string or B is an element of Y. | Assume the . 
assertion is correct for all B € xt, o < i < i. Then 
the assertion is correct for all 8 € yi, as follows: 

Let B = BiB. B.S e xs" 1 a ey. “There are three 
cases to consider, based on the relationship of & to £,(@) 


in equality (1): 


a es ee 


Case 1. a = £,(Q) 

Then y = £, (a). We have from equality (2): 

YB, 70 = y'£, (B,)-a and YB, °a = y* £, (B,)°a, whence 
B,°By = £,(B,)°£,(B,) = £,(B,)°B)) and thus 


y:Bra = y-£,(B)-a 


Case 2. a= Hef, (a), lL non-empty. 

Then yp = f(a). We have: 

Vo [(yp°& = £,(@)-f,(p)-£,()) = 
(y-p*h£,(%) = £,(a)-f,(p)£,()) = 
Cerio = £,(a) -£,(9)) = 
(yor = vhf, (p)) = 
(orn = He £,(9))] 

Substituting By and Bo for 9 yields: 
BiH = uf, (B,) 


Bo" = uf, (Bo) 


-< 

mee) 
Q 
u 


Y'B-He£, (a) 

= YB, °By "Hf, (2) 

= vB, -u-£, (By) -£, (@) 

= yh £, (B,)+£,(B))°£,(@) 


= £,(a)-£, (BB) -£,(@) 


£, (a) -£, (B)-£, (@) 
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Case 3. p-A = f(a), }. non-empty. 
The prest for Case 3 is similar to that for Case 2 and is left 


to the reader. 


Theorem 5,1: (Elimination Theorem) 
Let S and S' be iteration schemas with the: same variable.symbols, and let 
D be the union of the domains of their.free interpretations. Let D' be 
the set {5]-A, €D, x any variable. aymbol -of the schemas }. Let s and 
s' be iteration statements in the programs of 6 and 5', respectively, 
and suppose that for any variable symbol y of. the achemms there exist 
total functions £,:D7*D, £,: D' +D', and £ :.D+D', which 
At 72 ¥3 
satisfy the following condition: 
Let E and E' be finite, cosistent, free executions of S 
and S', Let @, 8, and y be strings such that @. is the value 
associated with y just prior to the first execution of statement s 
during E, B-@ is the value associated with y immediately following 
the last execution of s, and Y.B8-@ is the value agsociated with y 
at the conclusion of E. Let @', 8", and Y' be strings defined 
in a similar manner with E' in place of E and s' in place of s. 


Then: . 
4 = 

te hs Ay SS? 

2. Br= £ (B) 

72°C 

3. ¥y' = fy (a) 

3 
Suppose also that concatenation distributes over the function f i.e. 


2’ 
suppose that f (6)-f (co) = £_ (6*c), all 6,0 € D'. 
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Let 85 be the schema obtained..from S.by,¢ eliminating. statement. s 
from its program, Let:S, be the schema obtained: from.§ by, replacing 
8 with the program of the body of s, bets Big! and. S', be the. schemas 
obtained by eliminating a" ina similar mannes..from the schema 5°». 

| Then S is equivalent to S' if and only df.8, is equivalent to s'5 


and 8, is equivalent to 8’. iy PREY Be Ps Pad 


Proof: From the previous lemm, it ‘must be thé’ case that § and’'S*” are 
equivalent if they have the sae Values Tor consistent’ executions 
during which the bodies of » and’s? ete exituted'no more than 
once. (This ensures that the two equalities Gf the: lemma are 

‘satisiied,) . Clearly. this; 4s.the cave. if,andqnly. if 6 i 
equivalent. to.S'), and.S, is: equivalent, te Sti... 


Perhaps a few-words about the’ theorem are: ii’ onder,” ‘particularly 
with regard to its <pel seat tone pee CEES Shree BEY eee 

supnene we Gace a pair of ‘schemas $ and st whote programs consist 
of assignment and iteration statements only: cae which have “dent ical 
sets of variable symbols. Let # be the best “cusetion statement in the 
“program of S, and supposé there ‘extets a etecemead x‘ in ‘the program of 
S' such that s and s' are logic equivelent. ° Fer any variable ‘symbol x 
of S, we may divide the value Se associated with x at the conclusion 
of a finite, free execution E of S into three parts: the part generated 
prior to the executions of statement s, the part. generated during the 


executions of statement s, and the part generated following the executions 
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of statement s.. (We note that the last part is a constant: since s is 
the last iteration statement in the program of 8, the last part is 
determined by the particular assignment statements following s and is 
independent of the execution we consider. ) 

Similarly, we may divide the salsa o's associated with x at the 
conclusion of a consistent execution of 5’ into portions generated 
prior to the executions of statement s', during the executions of 
statement s', and following the executions of statement s'. 

The conditions required by the theorem for the elimination of s 


and s' are these: _ 


(i) The portion of Ss generated during the executions of s' 
depends only on the portion of & _ generated during the executions of s, 


while the other portions of .. do not, depend on this portion of - . 


(ii) The portion of <8 generated during each execution of s' 
depends only on the portion of oy generated during the corresponding 
execution of statement s. (Intuitively, this ensures that concatenation 


distributes over the function fo.) 


These requirements are of course rather strict, but we shall show 
that for several interesting classes of schemas, the requirements must 


be satisfied by amy pair of equivalent schems. 


om eo 


5.5 Solvable Problems for Single Appearance Schemas. 


In this section we demonstrate that equivalence is decidable for 
certain classes of restricted location, single appearance schemas 
(RLSA schemas). We begin by considering the class of such schemas 


which are conditional-free. 
5.5.1 Decidability of Equivalence for Conditional-free RLSA Schemas. 


Let S be an iteration schema, and let s be an iesracicn statement 
in S. We say that s is a trap in S if, whenever the first element of 
TESTS(s,E) has outcome true if s is a WHILE statement or outcome false 
if s is an UNTIL statement, E is a non-terminating execution of S. 
(That is, a statement in a schema is a trap if the execution of its 
body is sufficient to guarantee the divergence of the schema's 
execution. ) 

While it is in general undecidable whether an iteration statement 
in an arbitrary iteration schema is a trap, it is decidable whether an 
iteration statement in a RLSA schema is a trap: 

Let S be such a eheias Clearly, S contains a trap if and only if 
it contains some iteration statement s such that the body of s contains 
no assignment statement of the form 'x @ f(x)', where x is the test 
variable of s. If such a statement exists, then it is a trap as is any 
iteration statement in its body. After being identified, any such trap 
can be removed from the schema and the schema can be re-examined for 


additional traps until all have been found. 


Of course we cannot, in general, remove traps from a schema without 
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affecting its icone baiavie’ under certain interpretations. If the 
schema is a RLSA schema, however, we can at least ensure that its traps 
take a particularly simple form: 

An iteration schema is in proper form if the body of each of its 
traps is the empty schema See _ 

We note that any RLSA schema can be effectively ceunstomed into an 
seuiviieas RLSA schema in proper form. | 
Lemma 5,2: | 
Let S and S' be equivalent RLSA schemas in proper form, such that neither 
schema contains main conditional statements. Lat s be a main WHILE 
(UNTIL) statement in S, and let Pi be the predicate earns in s. Then p 


appears in a main WHILE ila statement in S'. 


Proof: Saree otherwise. In particular, suppose that p appears in a 
main WHILE statement in S but does not appear in a main WHILE 
statement in S'. Let E' be the execution of s! in which the 
body of no iteration statement is securely: and ist E be any 
consistent execution of 5S dxtined by an interpretation in which 


the predicate assigned to p is Tephence Ty true. (Since no 


test of the form (5,p) is made with outcome false during E', 
some such E surely exists.) Then E' is a ‘terminating execution, 
while E is clearly non-terminating, contradicting the equivalence 


of S and S'. 
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Lemma 5.3: 


Let S and S' be equivalent RLSA schemas such that neither schema contains 


main conditional statements. Then if p is a predicate symbol in a main 


trap of s, p is a predicate symbol in a main trap of S', 


Proof: 


Since p appears in a main iteration statement in S, it must 

also appear (according to the previous lemma) in a main iteration 
statement in S'; moreover, each of these statements must be WHILE 
statements or each must be UNTIL statements. Let s and s' 

denote the statements in S and S', respectively, in which p 
appears. 

Let E be any finite execution of S, and let E' be a consistent 
execution of S‘'. Since E is finite, TESTS(s,E) must consist of a 
single element T. Clearly, T must be in TESTS(s',E'), since 
we eeuid otherwise change the outcome of T in E to obtain a 
non-terminating execution of S consistent with E', contradicting 


the equivalence of S and S'. Also, T must be the first element 


of TESTS(s',E'), since if it were not we could change the outcome 
of this first element to obtain a finite execution E" of S' such 
that E"” is consistent with E and T is free with respect to E", 

We could then change the outcome of tf in E to obtain a non- | 
terminating execution of S consistent with E", again contradicting 
the equivalence of S and S', Hence, for any pair of consistent 
finite executions by the schemas, the first test made at s must be 


the first test made at s'. 


But then s’ must be a trap: 


A BR ete ce ten 
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If not, we could surely find a finite execution £', of 8' in 
which the body of s' is executed at least once. Since s and s' 
are both WHILE statements or both UNTIL statements, the body of s 
must also be executed at least-once during any execution E, of S 
consistent with BE’, (since the first test made at s during E, 
must be the same as that made at :s' during E',,). But since s 
is a trap, the execution E,, must: be non~terminating, and we 
again contradict the equivalence of s aml 8°, 


0 


Lemma 5.4: 
Let S and S' be equivalent RLSA schemas such that neither contains main 


conditional statements. Let a be a main iteration statement of S. Then 


there exists a main iteration statement s' of S' such that s' and s are 


logic equivalent, 


Proof: 


If s is a trap, the result follows frem the preceding lemma. 


Suppose that s is not a trap: 


Let p be the predicate symbol in s. According to Lemma 5.2, 
S' must contain a main iteration statement s' with ‘predicate | 
symbol p. If s and s' are not logic equivalent, there must 
exist finite, consistent, free executions E of § and E"' of S' 
such that TESTS(s,E) # TESTS(s',E'), and we can surely find such 
sequences for which all but the last’ elements of the sequences are 


the same. Let T be the last element of TESTS(s,E) and let T' be 


a PL = 
the last element of TESTS(s',E'). The first component of one of 
the tests, say T, is at least as long as the first component of 
the other. We need only change the outcome of T to true if s is 
a WHILE statement, or to false if s is an UNTIL statement, and 
provide the same outcome for each subsequent test made at s to 
obtain a non-terminating execution of S. But since all of 

these tests must be free with respect to E', the. execution is 


consistent with E', contradicting the equivalence of S and S',. 


\~ 
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Lemma 5.5: 


Let S and S' be equivalent, conditional-free, RLSA schemas in proper 


form. Let s be any main iteration statement of S, and let R be the 


body of s. Let s' be the iteration statement in S' logic equivalent 


to s, and let R' be the body of s'. Then every predicate symbol in 


a main iteration statement of R is in some main iteration statement of 


R', 


Proof: 


Let Ss) be the schema obtained from S by replacing s with the 
program of R, and let S'; be the schema obtained from S' by 
replacing s' with the program of R'. Since s and s' are logic 
equivalent, s, and sh must be equivalent schemas. -bemma 5.2 
ensures, therefore, that each predicate symbol which appears in 


a main iteration statement of Sy must appear in a main iteration 


statement of S'; and the result follows immediately. 
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We are now in a position to prove the following rather intuitive 


result: 


Lemma 3.6: 
Let S and S‘ be equivalent, conditional-free, ELSA schemas in proper 


form. 


Then each iteration statement in S.is logic. equivalent to some 


iteration statement in S'. 


Proof: 


For simplicity, we assume that S and $' have only two levels of 


iteration: the obvious generalization is left to the reader. 


Let s be a main iteration statement of S, and let R be its 
body. Let s' be the main iteration statement of S' which is 
logic equivalent to s, and let R' be the body of s'. Lemma 5.5 
ensures that for each main iteration statement r of R, there is 
a main iteration statement r' of R' containing the’ same predicate 
symbol. 

Let S, and S'; be the schemas constructed as in the proof of 
Lemma 5.5. According to Lemma 5.4, r and r‘ must be logic 
equivalent statements in these schemas, implying that precisely 
the same tests. are made at each statement during the first 
executions of R and R' in any pair of finite, consistent, free 
executions of S and S',. 

Let S) be the schema obtained from S$ by replacing s with two 
copies of the program of R, and let S', be obtained similarly | 
from S'. From the preceding argument, we have that the first 


instance in Ss, of each min iteration statement of R must be logic 
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equivalent to the first instance in S'5 of the statement 
containing the same predicate symbol. Hence, we may change 

the predicate symbol in each such pair of statements to some 
new symbol which does not appear elsewhere in the schemas, 
without affecting the equivalence of S, and S',. Since the 
resultant schemas are single appearance schemas, we can apply 
Lemma 5.4 to demonstrate that the second occurance in Ss, of the 
statement r is logic equivalent to the second occurance in S'5 
of statement r', implying that the same tests are made at r and 


r' during the first and second executions of R and R' in any 


pair of finite, consistent, free executions of S and S'. 


For any n > 0, we need only apply this argument n times 
to demonstrate that, for such executions, the same tests are 
made at r and r' during the first n executions of R and R'; 


hence, r and r' are logic equivalent. 


An immediate consequence of the lemma is that predicate symbols 
of such schemas S and S' must be similarly "nested" in each schema, i.e. 
if symbol p is in the body of the statement in S containing symbol q, 


then p must be in the body of the statement in S' containing q. 


Suppose we wish to decide the equivalence of RLSA schemas S and S', 
and suppose neither schema contains main conditional statements. From a 


previous lemma, we know that if S contains a main trap which has predicate 


= Bhs 


symbol p and test variable x, then S' can be equivalent to $ only if S' 


contains a similar main trap. Suppose that this is the case: 


Let es be the schema obtained from S by adding a new variable symbol 


v, to the scheme and following each statement of the form 


P 
x @ £(x) 


in the portion of S preceding the trap with the statement 
Vp o £(v,) 


and then deleting the trap. (Intuitively, v. is used during an execution 


Pp 
of 3, to “record” the value of x which would have been tested at the 
trap during the corresponding éxecution of S$.) Let s' be the schema 


obtained in a similar manner from S'. 


We know from the proof of Lemma 5.3 that if S and S' are equivalent, 
the value tested at the trap in § must be the same as that tested at the 
trap in S' during any pair of consistent, finite executions of the 


schemas. Hence, S and S' are equivalent if and only if S_ and Ss‘ are 


P 
equivalent, and it is clear that by repeating the construction for each 
corresponding pair of traps in the schemas, we can reduce the equivalence 


problem for S and S' to that for similar schemas which have no main 
traps. 

Lemma 3.7: 

Let S and S' be conditional-free RLSA schemas, and let k > 0 be the 


maximum of their sizes. Then we may construct from S and S' two pairs 


of conditional-free RLSA schemas of size no greater than k-1, such that 
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S and S' are equivalent if and only if each of the pairs comprises 


equivalent schemas. 


Proof: We may assume that S and S' have the same variable symbols and 
that their predicate symbols are similarly nested, otherwise we 
can immediately conclude that they are not equivalent. Without 
loss of generality, we may also assume that the schemas are 


without main traps. 


Let s be the last iteration statement in the program of S, 
and let s' be the statement in S' containing the same predicate 
symbol as s. Let So? sy 2 and aan be the schemas constructed 
from S and S' as in the proof of Theorem 5.1, and suppose that 


S, is equivalent to S' 


5 and s. is equivalent to S' 


0 i 

Every statement which follows s' in S' must be logic 
equivalent in a to a corresponding statement in So» and must 
be logic equivalent in sty to the same statement in 5 Clearly, 
this can be the case only if each variable modified ae at is . 
passive in all statements in S' which follow s'. Now, let E and 


E' be arbitrary consistent, finite, free executions of S and S', 


and let x be any variable symbol of the schemas: 


We may write the value associated with x at the conclusion 
of Eas Y+B-Q@, where 2 is the value associated with x just 
prior to the first execution of statement s, B°@ is the value 
associated with x immediately following the last execution of 


statement s, and Y is the fixed portion of the value due to the 


assignment statements affecting x which follow statement s in 
the schema. We may write the value associated with x at the 
conclusion of E’ as y's B's", where @', B', and y' are 
defined in a manner similar to that above, although y' is 

not fixed but rather depends in general on ‘the particular 
“execution E! being considered. Since gach variable modified at 
s' ig passive in all statements following s', it must be the 
case that Y-C = Y*.a’, and thes that Y' and a@' are 
completely determined by @. Also, it must be the case that 
B' is completely determined by 8 since every test made during 
an extcution of the body of s must also be made during the 
corresponding execution of the body of s', else by Lemma 5.6 


we contradict the equivalence of S,-and.S‘ 


1 i° 


Thus, there must exist functions fy £ x»? and ty such that 
for all executions E and E' as above, at = fx, 0s pi = fx, 68 ) 
and y' =f, (a). As noted above, the portion of B' due to a 
particular execution of s' during E' depends only ‘on that portion 
of B due to the corresponding execution of s during E, and hence 
concatenation distributes over fx: The lemma then follows from 
the Elimination Theorem: 

S$ and S' are equivalent if and only if So and S' 9: and s. and 
S'h> are pairwise equivalent. 
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Thus we have: 


Theorem 5.2: 
Let S and S' be conditional-free RLSA schemas. Then it is decidable 


whether S and S' are equivalent. 


Proof: We note that equivalence is trivially decidable for schemas of 
size 0. The theorem follows immediately from the previous 


lemma by induction on the maximum of the sizes of S and S', 


CO 


Theorem 5.2 can hardly be considered a surprising result, and the 
reader will no doubt have observed that there are rather more direct 
approaches to this particular problem than that which we have presented. 
(In particular, Lemma 5.6 can be proved fairly simply without utilizing 
Lemmas 5.4 and 5.5, although our efforts are hardly wasted since these 
lemmas are needed in the next section. ) 

The proof presented, however, illustrates the major steps in the 
proofs of our other cases: 

(i) The transformation of schemas into a form facilitating the 
identification of logic equivalent statements. 

(ii) The demonstration that such statements exist in pairs of 
equivalent schemas. 


(iii) The application of the Elimination Theorem to reduce the 


equivalence of a pair of schemas to that of "smaller" schemas. 
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In the present case, all three steps are relatively straightforward. 
In the next case, however, step (i) is complicated by the presence of 
conditional statements in the schemas, while in the third case steps 
(ii) and (iii) are complicated by the multiple appearance of predicate 


symbols, The major steps, however, are the same in each proof. 
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5.5.2 Decidability of Equivalence for FRLSA Schemas. 


In this section we demonstrate that equivalence is decidable for 
the class of free, restricted location, single appearance schems 


(FRLSA schemas). 


We begin by showing that essentiality is decidable in such schemas: 


Lemma 5,8: 
Let S be an FRLSA schema. Then for each predicate symbol p in S, it is 


decidable whether or not p is essential. 


Proof: Since the schema is free, it is clear that p is an essential 
symbol if it appears in an iteration statement in S. Suppose, 
therefore, that p appears in a conditional statement. We claim 
that p is essential if and only if the true and false subschemas 
of this statement are not equivalent: 

Let s be the conditional statement, and suppose that its 
subschemas are not equivalent. Then we can find partial executions 
E.. and E. of S such that the executions end immediately after the 
first execution of a subschema of s, the executions conflict only 
with respect to the outcome of the test made at s, and the value 
associated with some variable symbol x of S is different at the 
end of each of the executions. We complete the execution Ey in 
such a way that the outcome of each test subsequently made at a 
WHILE statement is false, the outcome of each test subsequently 
made at an UNTIL statement is true, and the outcome of each test 


subsequently made at a conditional statement is, say, true in each 
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case. We complete the execution Ey in a gimilar manner. Since $ 
is a single appearance schema, these ‘complete exécutions conflict 
only with respect to the outcome of the test made at s. But since 
precisely the same sequence of statements is executed afters in 
each case, the valve of x at the end of the executions must still 
be different. ‘ieniee p is an essential symbol if and only if the 
subschemas of s are not equivalent. | 

But it is clearly decidable whether the subachemas of s are 
equivalent: 

Tf either subschema contains an ‘pasacon statement, the 
subschemas cannot be equivalent since the other subschema 
cannot contain an iteration statement with the same predicate 
symbol. If neither subschema contains an iteration statement, 
their equivalence is trivially decidable since there are only a 


finite number of distinct free executions of the schemas. 


Hence, it is decidable whether p is essential. 


We say that a schema is reduced if it contains no inessential 
symbols. We note that a conditional statement containing an 
inessential symbol may be replaced in a schema with the program 


of either of its subschemas, and thus we have: 
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Corollary 5.9: 


Let S be a FRLSA schema. Then we may construct from S a reduced FRLSA 


schema equivalent to S. —_/ 


It maybe worth mentioning here that the decision not to permit 
the designation of certain schema variables as "output" variables is 
rewarded with the relative simplicity of the proof of Lemma 5.8. 

While the result is still true for schemas with specified output 
variables (it was established by the author in [22] for a class of 
schemas somewhat more general that the FRLSA schemas), the proof 
becomes rather complex in that case, since we must show that the final 
value of some output variable, rather than some arbitrary variable, is 
dependent on the outcome of a test made at a conditional statement. 
Since this dependency may be quite indirect, the decision procedure for 


such schemas is quite complicated. 


We use some of the results of the previous section to prove the 
following lemma: 
Lemma 5.10: 
Let S and S' be reduced, equivalent FRLSA schemas. Then predicate symbol 
p appears ina conditional/WHILE/UNTIL statement in S if and only if it 
appears in a conditional /WHILE/UNTIL statement in S'. Moreover, for each 
iteration statement in S there is a logic equivalent iteration statement 
in S', and if s and s' are such iteration statements, the sets of 


predicate symbols appearing in their schemas are the same. 


Proof: 


“many copies of its body. 8, must be equivalent to S' 
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Suppose that predicate symbol p appears in a main conditional 
statement s of S, Since p is an essential symbol, it must appear 
in some statement s' in S', Moreover, s' must be a conditional 
statement: 

Suppose otherwise. In particular, suppose that s' isa 
WHILE statement. Let S, be the scheme obtained frou S by 
replacing 8 with the program of its bic eubecean: ‘and let s 
be the "schema" obtained from S' by replacing s'’ with infinitely 
2 but since 
S' is free, at least one of its variables (namely the test 
variable of s') is modified at s', ‘and thus s cannot be 
equivalent to S',. Hence, s' must be a conditional statement. 
We note also that since p is essential, . produceive test may be 
made at s' each time it is executed. If S and S' are to be 
equivalent, therefore, s' must be a main conditional statement 
of S', 

We are thus assured that for each main conditional statement 
in S, there is a main conditional statement in S' with the same 
predicate symbol, Let. 5. and S- be the schemas. obtained 
from S by replacing each main conditional statement with the 
program of its true subschema and ite false subschema, 
respectively, Let Ss". and S' be obtained in a similar manner 


from S', Clearly, S, must be equivalent to S' , and S, must be 


t? 
equivalent to S' Applying Lemmas 5.2 and 5.4 to each pair of 


schemas, we establish the desired result for the symbols occuring 


Pe: ke 


in main statements of the schema. We need only employ the 


methods of Lemmas 5.5 and 5.6 to establish the result for all 


symbols, 


Again, the preceding result is highly intuitive. We note, 
however, that the result is hardly less intuitive, though demonstrably 


false, if we remove the restriction of freeness from the schemas. 


We now show that a "weak" form of logic equivalence must hold 
between certain main conditional statements of equivalent, reduced, FRLSA 


schemas. The following definition is useful: 


Let r be a main conditional statement in an iteration schema S. 


Then r is a final main conditional statement if, whenever r is executed 


during an execution of 5, no main conditional is executed after r. 


Lemma 5.11: 


Let S and S' be equivalent, reduced, FRLSA schemas, and let r be a final 
main conditional statement of S. Let E and E' be consistent, finite, 
free executions of S and S', respectively. Then a test T is made at r 
during E only if T is made during E'. 
Proof: Suppose that such a test is made during E. If either subschema 
of r contains an iteration statement s, then from Lemma 5.10 
s can execute during E only if the statement logic equivalent to 


s executes during E'. Hence, T cannot be free with respect to E'. 


Suppose that neither subschema of r contains an iteration 
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statement, i.e. suppose that both cub schemas are composed solely 
of assignment statements. Let x be the test variable of r, and 
let r' denote the main conditional in S' containing the same 
predicate symbol as r. Since S and S' are equivalent and reduced, 
the test variable of r' must also be x and no iteration statement 
which modifies x can precede r' in the program of S' unless its 


logic equivalent counterpart precedes r in the program of S. 


Let E, be the execution obtained from E by choosing outcome 
false for each test made at a WHILE statement after the execution 
of r, and outcome tre for each test made at an UNTIL 
statement; let E', be @ consistent ‘eaucotion of S', The test 
7 1s made during E,, and since the predicate symbol in r is 
essential and the subschemas of r consist solety of assignment 
statements, the value associated with some variable symbol y after 
the execution of r during E, must depend on the outcome of T. 
Also, since an assignment statement is executed after the 
execution of £ in E, just if the assignment statement is a main 
statement of 5, the value associated with y at the gopclugion 
of Ey must also depend on the outcome of Ts Since S and s' are 
equivalent schemas, test fT must be made during E' 6 and hence 


during E'. 
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We may apply the lemma recursively to a pair of such schems S and S' 


to obtain: 


Corollary 5.12: 


Let S and S' be as in Lemma 5.11. Let s be a main conditional of S, 
and let s' be the main conditional of S' with the same predicate symbol. 
Then during any pair of finite, consistent, free executions of S and S', 
either no test is made at s or s', or the same test is made at both 


statements. —_/ 


A consequence of the corollary is that the equivalence problem for 
FRLSA schemas reduces to that for FRLSA schemas with no main conditional 
statements: 

Let S and S' be reduced FRLSA schemas, and suppose that for each 
main conditional in S there is a min conditional in S' with the same 
predicate symbol and test variable. (If such is not the case, we may 
conclude from a 5.10 that S and S' are not equivalent.) Let r be a 
final main conditional of S, and let r' be the corresponding main 
conditional of S'. We construct from S and S' a pair of schemas S, and 
S' 53 as follows: 

We add a new variable symbol x, to each schema to record the 
values tested at r and r' during executions of the schemas, in the 
same manner as when eliminating main traps from the schemas of Section 


5.5.1. If r is in a subschema of some other main conditional of S, we 


replace this conditional with the program of the subschema and replace 


the corresponding conditional in S' with the program of its corresponding 
subschema. This is repeated until r is no longer in a subschema of a main 
conditional of 5S, and then r and r‘' are replaced with the pecesene of one 


cares 


of their sige taoscaate aay their true sheet: The. resultant schemas are 


hte Fok Tat 


s, and sto 


We construct a second pate of ochemts S, and ae fron § and s' 
by replacing r and r' with the prograns of chate true subschemas, and 
wiaueing the beauttant schemes; a third pais ‘of pene S, =. st ee 
constructed in a similar manner, replacing r and r' with the Geogemins of 
their false aubschemas. 

Intuitively, the equivalence of S, aad S',.eneures thet a test 
made at r during an execution of S must also be made at r' during any 
consistent execution of S'. ..0f course, this. preaypposes that no test 
made at a conditional statement of 5 whose subachema containa x will have 


an outcome different from that of the test.made at, ite counterpart in S', 
but from Corollary 5.12, this is the case if e, is equivalent to Se 

and S- is equivalent. to Ss" : Hance, §,and S' are. aquivalent.. 4f and. 

only if S, and S'.,.S, and S',, and :S_ and S's, .4re pairwise equivalent. 
Since each of these schemas contains at least one fewer main conditional 
than S and S', the constructions my be repeated to reduce the equivalence 
of S and S' to that of a finite number of pairs of schemas without main 


conditionals. 


The proof of the following lemma is vireualy | identical to that of 


Lemma 5.7 and is left to the vende? 
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Lemma 5,13: 
Let S and S' be FRLSA schemas without main conditionas, and let k >0 


be the maximum of their sixes. Then we may construct from S and S' 
two pairs of FRLSA schemas of size no greater than k-1, such that S and 
S' are equivalent if and only if each of the pairs comprises equivalent 


schemas. —/ 


We have observed that the equivalence of a pair of FRLSA schemas 
can be peduced to thet of a finite number of pairs of FRLSA_ schemas 
without main conditionals. We note that the latter schemas are 


of the same sine. as the originals, and thus: we have: 


Theorem 5,3: . 
Let S and S' be FRLSA schems. ‘Then.it is decidable if S and S' are | 


equivalent. 
Proof: From the previous lemma, by induction on: the size of S$ and S', 


Oo 
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5.6 Decidability of Equivalence for FILCF Schemes. 

In the previous section we dealt with schemes in which predicate 
symbols appeared only once. Finding Logic. equivalent statements in 
equivalent schemas was quite easy, therefore, because we ae precisely 
which pairs of statements to examine — those containing the same 
predicate symbols. 

In this section we consider the equtve tence preblem for free, 
independent location, conditional- free schemes USE schemas). As 
might be eenccted: the proof that. logic equivalent. statements exist si 
equivalent pairs of such schemas is not sutte: as trivial as it was in 


the erevigua cases: 


Lemma 5,14: 
Let S and S' be FILCF schemas, and let s be the lest iteration statement 
in the program of S. Then if S and S' are equivalent, there exists a 
statement s' in the program of S' such that-s.and s' are logie equivalent. 
Proof: Suppose that S and S' are equivalent. Let E be a free execution 
of S such that TESTS(s,E) contains infinitely many elements, and 
let E' be a consistent execution of S'. (We note that since E 
is non-terminating and S and S' are equivalent schemas, E' must 
be a non-terminating execution.) Clearly, every element of 
TESTS(s,E) must be an element of TESTS*(S',E'), since if some 
FG TESTS(s,E) were not in TESTS*(S',E'), we could change the 
outcome of 7 during E to obtain a terminating execution of § 


consistent with the non-termminating execution E', contradicting 
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the equivalence of S and S'. Also, all but finitely many of 
the elements of TESTS(s,E) must be in TESTS(s',E') for some 
statement s' in S': 

Suppose otherwise. Then there must exist statements sj] 
and sj in schema S' such that TESTS(s,,E") and TESTS(s, ,E’) 
each contain infinitely many elements of TESTS(s,E). (For 
simplicity we shall assume that 8) and 85 are the only such 
statements.) It must be the case that one of the statements, 
say Ss), is in the body of the Sther, Let T be any test in 
TESTS(s,E) TESTS(s, ,E'). If we change the outcome of T 
during E, we obtain a terminating execution EN of S; also, 
since S is an independent location schema, ne value which 
is longer than the first component of T and ends with the 
same symbol is tested during E". Suppose we also change the 
outcome of T during execution ET: the first test made at 
statement s, after T is made at Sy must be free with respect to 
E" since the value tested must be longer that that tested in T 
and must end with the same symbol. If s,; is a WHILE statement, 
we choose the outcome of this test to be true, as we do for each 
subsequent test made at 81 (each of which must also be free with 
respect to E"), If s, is an UNTIL statement, we choose a 


succession of false outcomes. In either case, the resultant 


execution is consistent with E" but is non-terminating, 
contradicting the equivalence of S and S',. Hence, there must 


exist a statement s' such that all but finitely many elements 
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of TESTS(s,E) are in TESTS(s',E'). 

We now show that s' must be in the program of S': | 

Let x be the test variable of wtatcneats s and s', and 
suppose that s' is not in the program of S', i.e. suppose that 
‘s' is in the body of some iteration statement r, in the program — 


of S'. Clearly, no statement r which follows r, in the program 


0 
can have test variable x, otherwise we could obtain from Ea 
terminating execution of S and from E' a consistent, 
non-terminating execution of S' by changing the outcome of 
any test T € (TESTS(s,E) N TESTS(¢* ,E')) as above, using s' in 
place of sj and r in place of 8} Similarly, the statement ro 
itself cannot have test variable x. Let T' be the first test 
made at To with the property that during the subsequent 


execution of r,'s body, some test T" € TESTS(s,E) is made at s'. 


0 
Let E, be an execution of S consistent with E except for the 


outcome of test T" (if T" is made during E), and such that 
TESTS(s,E,) 1s infinite. Let E', be an execution of S' 
consistent with E, and consistent with the portion of E' 
preceding the execution of Tor If we apply the arguments of 
the preceding paragraph, we have that there exists a statement 
s', in schema S' such that all but finitely many of the elements 
of TESTS(s,E,) are in TESTS(s',,E' |). Sipreover, B'S must be in 


the body of some iteration statement r, which follows ty in the 


program of S', since E and E', are the same prior to the 


1 
execution of rp, and s', itself cannot be in the program of S'. 
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~~ 


But if we repeat this argument ad infinitum, we can show that 
there must exist an infinite sequence of statements TosTysTo. se 
which follow one another in the program of S', an impossibility 
since the program must be finite. Hence, the statement s’ must 
be in the program of S' (and must in fact be the last iteration 


statement in the program with test variable x). 


The logic equivalence of the statements is now easily 
demonstrated: 

We note that for any pair of finite, consistent, free 
executions E, of S and E', of S', the last element of TESTS(s,E,) 
must be the same as the last element of TESTS(s',E',,). If this 
were not the case, we could change the outcome of whichever test 
had the longer first component, or either test if the components 
were of equal length, without disrupting the consistency of the 
executions. This would cause another test to be made at the 
corresponding statement and since this test, and all subsequent 
tests made at the statement, would be free with respect to the 
execution of the other schema, we could permit this execution 
to diverge while still remaining consistent with the other, thus 
contradicting the equivalence of S and S'. 

Hence, the last elements of TESTS(s,E,,) and TESTS(s',E' ,) 
must be the same for any such Ey and E',. But since the schemas 


are free, this can be the case only if TESTS(s,E,,) = TESTS(s',E' ,): 


Suppose otherwise. Then there must be a test T in one of the 


sequences, say TESTS(s,E,), which is not in the other. Since T 
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must be made during E' 5? it must be the case rhae TE TESTS(r, E' ,) 
for some statement r whose execution preceties that of s' during 
E',- Let EB be the execution of 3 conflicting with E, only with 
respect to the outcome of T, and let EY be an execution of S' 
which is consistent with E) and is consistent with the portion 

of a which precedes the making of test 7. It must be the case 
that T € TESTS(r,E',), but since T is the last element of 
TESTS(s,E, ) it must also be the last element of. TRESTS(s',E',), 


contradicting the freenesa of S'. 


We have, therefore, that TESTS(s,£,) = TESTS(s',E',) for 
any pair of finite, consistent, free executions Ey and E' > 


and thus s and s' are logic equivalent. 


Lemma 5,15: 

Let S and S' be equivalent FILFC schemas of size greater than 0. Let 
s be the last iteration statement in the program of S, and let s' be 
the logic equivalent iteration statement in S'. Then each variable 
which is modified at s' is passive in all statements which follow s' 


in the program of S', 


Proof: Suppose otherwise. In particular, suppose that a variable x is 
modified at s' and active in some statement s" which followe s'‘. 
(For simplicity, we assume that x is the only such variable and 


s" the only such statement — the generalization is tedious 
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but straightforward.) We can assume without loss of generality 
that x is the test variable of s", for if it is instead the test 
variable of some statement in the body of s', we merely restrict 
attention in the ensuing discussions to executions of S' during 
which this statement is executed. 

Since x is modified at statement s' it is clearly the 
case that x is modified at s, since otherwise the value of x 
would be independent of the number of times s were executed 
during a free execution of S, while the value of x grows, in 
general, in proportion to the number of times the statement 
s' is executed during a free execution of S'. 

Also, it must be the case that x is active in 
statement s: 

Suppose otherwise. Let E and E' be consistent, 
finite, free executions of S and S' such that the value 
associated with x after the last execution of s' during E' is 
longer than that associated with x immediately prior to the 
first execution of s during E. Since we are assuming that x is 
passive in s, the first test made at s" during E' wisebe free 
with respect to E, as must any subsequent tests made at s"’. By 
choosing true outcomes for all of these tests, if s" is a WHILE 


statement, or false outcomes for all of these tests, if s" is 


an UNTIL statement, we obtain a non-terminating execution of 
S' consistent with E, which contradicts the equivalence of S 


and S', Hence, x must be active in s. But then s must also 
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be active in s': 

Suppose otherwise. ‘Let R be the body of s, and let 5, 
be a statement with test variable x in R. ‘Let Ey be a free 
execution of S in which By is executed tnFtaitely often 
during the first execution of R, Let EY bean execution of 
S' consistent with E,. ‘in which” the body of s' is executed 
exactly twice. Sinee 8 and 8' ate equivalent schemas, ae 
must be-a non-terminating execution. “In “fact, it must be the 
case that TESTS(s",&',) is infinite and that all but finitely 
a of its elements are in TESTS(s,,E,). “Let * be in 
(TESTS( 3, E.) Q TESTs¢s",E' x? ; and vet 2: be an execution of 
S which is consistent with ‘E, exeept for the outcome of 7 and 
which has the property that 8, is executed’ infinitely often 
during the second execution of R iE. Then since x is 
passive in all statements followttg s" in the program of S', 
we can find a finite execution E', of S’which “is consistent 
with Ey: 

The execution E*, will! be consistent with E', until the 
test T is made. Since each statement’ sibséquent ly executed 
has a test variable other than x, no more than finitely many 
tests need be made at any statement béfere a test is made 
which is free with respect to Bie We choose the outcome of 
such a test to be true if it is made at an UNTIL statement, or 
false if it is made at a WHILE statement. The reeultant 


execution is clearly terminativig’and is ‘consistent with E 
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contradicting the equivalence of S and S'. Hence, x must be 


active in both s and s'. 


Let R' be the body of s', and let s'S be a statement in R' 
with test variable x. For simplicity, we assume that s'y is 
the only statement in R' with test variable x and that s, is 
the only statement in R with test variable x; the generaliza-~ 
tion is again straightforward. Let E' be a free execution of 
of S' in which s',. is executed infinitely often during the 
first execution of R', and let E be a consistent execution of 
S. No more than finitely many elements of TESTS(s,,E) may be 
free with respect to E', otherwise we may terminate the 
execution of S in a manner consistent with E', contradicting 
the equivalence of the schemas. Hence by changing the 
outcome of some test T € (TESTS(s,,E) N TESTS(s',,E',)), we 
may obtain from E a finite execution E_ of S such that Ee is 
consistent with E except for the outcome of T, and such that 
T is the last element of TESTS(s,,E,). Let Be be an execution 
of S' which is consistent with E, and is also consistent with 
the portion of E' prior to the making of T. We note that the 
first test made at s" during Ete must be free with respect to 
E_, as must each subsequent test made at s", and hence that 


T 


E', can be chosen so that it is finite, again contradicting 


the equivalence of S and S'. 


Thus no such variable x can exist, and each variable which 


is modified at s' must be passive in all statements which follow 
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s' in the program of S'. 


The proof of the following lemma is again virtually.identical to 
that of Lemma 5.7: 
Lemma 3.16: 
Let S and S' be FILCF schemas, and let k > 0 be the maximum of their 
sizes. Then we may construct from 5 and 58" two pairs of FILCF schemas 
of size no greater than k-1, such that S and S' are equivalent if and 


only if each of the pairs comprises equivatent schemas. __/ 


Finally, we have: 


Theorem 5.4: 
Let S and S' be FILCF schems. Then it is decidable whether or not 


S and S' are equivalent. 


Proof: From Lemma 5.16, by induction on the size of S and S'. 


O 
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5.7 Discussion. 


Obviously, the preceding results do not provide answers to all of 
the questions raised in Chapter IV. We conjecture, however, that 
techniques similar to those we have presented are applicable to most of 
the classes of schemas considered in the last paragraph of that chapter, 
and that equivalence is decidable for each of the classes. For certain 
of the classes, however, it is not clear that the additional efforts 


required to establish decidability results are well-spent: 


Our motive for studying the conditional-free schemas of the last 
section, for example, is that such schemas may provide a suitable basis 
for the study of structured independent location schemas in general, if 
methods can be developed to remove in some systematic manner the 
conditional: statements from such schemas. It would hardly seem 
worthwhile, therefore, to expend much effort in extending Theorem 5.4 
to non-free schemas, since the equivalence problem for such schemas can 
be shown reducible to that for free schemas in which conditionals are 
permitted. Of course, it might be argued that freeness is a rather 
undesirable restriction since it is not a decidable property of iteration 
schemas, but it is fairly easy to show (see Appendix B) that freeness is 
a decidable property of independent location schemas. 

A similar comment applies to the result for FRLSA schemas. Again, 
we hope to be able to apply the result to more general classes of schemas 
by identifying logic equivalent statements in pairs of schemas and 


suitably changing the predicate symbols in the statements. (In fact, 
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Theorem 5.4 can be derived in such a way from Theorem 5.2, although the 
proof that we have presented is somewhat more direct.) In light of the 
undecidability results in Chapter IV for restricted location casas. 
freeness will likely be a necessary restriction if equivalence is to be 
decidable for these more general clasiods: We lose little, therefore, 


by imposing the ‘restriction now. 


A few final words are in order about a class of schemas which does 
seem worth considering, however, and that is the clans of free and 
conditional-free schemas which are restricted location, rather than 
independent location. We conjecture that Lemma 5.14 is still valid for 
such schemas, although the proof is complicated by the fact that the set 
of tests whose first components end with some given symbol A, need not 
be made in order of increasing lengths of these components. ‘The 
remainder of the proof for the ‘independent location schemas is, with 
quite minor and obvious modifications, applicable to restricted location 


schemas. 
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CHAPTER VI: 


Independent location program schemas have been studied rather 
extensively (cf, [12], [16], [19]) because of the schemas' relative 
simplicity and because their equivalence problems are interchangable 
with those of a rather interesting class of automata, the multi-tape 
finite automata defined in [23]. In this chapter, we consider the way 
in which the equivalence problems for structured independent location 
schemas relate to those for such schemas in general, and to those for 


certain classes of the automata. 


We show that the weak equivalence problems for structured and 
non~-structured independent location schemas are interchangable, and 
that both problems are in fact unsolvable. While we are not able to 
show that the equivalence problem for multi-tape automata is reducable 
to that for structured independent location schemas, we are able to 
show that the equivalence problem for multi-tape automata with a single 
control state reduces to that for such schemas, and that the strong 
equivalence problem for independent location schemas in general reduces 
to the problem of deciding whether such automata are equivalent over 


some subset of their tapes. 


6.1 Multi-Tape Finite Automata. 

Our treatment of multi-tape automata differs somewhat from that in 
[16] or [23] since we consider a rather special subclass of the automata 
in a later section, and we wish the notions developed here to be 


reasonable for this subclass. 
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Intuitively, an n-tape automaton M is a finite automaton equipped 
with n one-way scanning heads, each on its own tape. Associated with M 
is an advancement function and a transition function which determine, 
based on the current internal state of M and the n-tuple of symbols 
being scanned, the tape heads, if any, whieh are to be advanced to the 
next symbol, and the internal state of M which is then entered. A 
particular state of M is designated the initial state of the automaton, 
another its accepting state, and a third its rejecting state. No 
transitions are permitted out of these ‘last two states. 

Each input tape of M is initially inscribed with a sequence of 
symbols from some finite tape alphabet followed by a special endmarking 
symbol $, beyond which a tape head is not permitted to scan. A 
computation by M on a set of tapes begine with M in its initial state 
and each tape head positioned at the leftmost square cf its tape, and 
proceeds until each head is seanning its respective endmarker, at which 
time a set of tapes is accepted if M is in its accept state or rejected 
if Mis in its reject state. If M is in neither state, or if such a 


positioning of tape heads never occurs, M is said to divexge on the 


tapes. 
Formally: 
An n-tape automaton is a seven-tuple 


M Ta (T, Q; dy Ga» dy f, h) 


where: T isa finite set of tape symbols, including the special 


- 111 - 


endmarker $. 
Q is a finite set of control states. 
dy € Q is the initial state of M. 
qd, © Q is the accepting state of M. 
q,. € Q is the rejecting state of M. 


£:QxT™-+ Q is the state transition function, a total function 


satisfying the property that £(q,>9) =O. and £(q_») = 45 all pe€ t 


hi Q x TY 4 2fle2s---an) 2yeeeon) 


» where gil, denotes the power 
set of {1,2,...,n}, is the head advancement function, a total function 
satisfying the property that h(q,~) does not contain i whenever the ith 


component of y is $, all q €Qand mp ET. 


A configuration of M is a pair (q,A), where q is an element of Q 
and A is an n-tuple of strings in Tt. (For such a A, we denote by TAIL(A) 
the string of length n whose ith symbol is the last symbol of the ith 


component of A, 1 <i <n.) 


A computation by M is a possibly infinite sequence of configurations 
(ay 5A, ds €dg2Aq), eee 9 Cayo As Cas Aas ope 
in which q, is the initial state q,, Ay is a tuple of single symbols, and 


for all i>l: 


(1) q, 


(2) Ay = A, ies where S is an n-tuple of symbols or nulls in T VY 


{%}, X the null string, such that for all j, 1 <j <n, the jth 


£(4,_,>TAIL(A,_,)) 


component of S is x iff j F h(q, pp ATG; 1). (Concatenation is 


extended to tuples of strings in the obvious manner: if X = (55 igi 5" Ope? 
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and Y = (cy, eae 21) are tuples of strings, then X-Y is the tuple 
(5,01, eee 9 Spe 19) 


An n-tuple of strings in T* is accepted by M if there is a finite 
computation by M ending with the configuration (4, 5A $"); it is rejected 
by M if there is a finite computation ending with the configuration 
(qo A> $"), If A is neither accepted nor rejected by M, - say that M 
diverges on (A. We note that since there are no ‘traneitions leaving 


4, OF qe no | may be both accepted and rejected by M. 


The Janguage accepted by M, written L(M), is the set {A | A. is 
accepted by M}. The Language xeljected .by M, written LQ) r is the set 
{A | A is rejected by M}. 


6.2 Equivalence Problems For Multi-Tape Automata. 


Let M and M' be n-tape automata, some n> 0, Then'M and M' are 
strongly equivalent if L(M) = L(M') and LQ) = L(M'). Mand M' axe 
weakly equivalent if (L(M) 1 L(M')) = 6 and (L(M) N L(M')) = 6, i.e. if 
no tuple of strings accepted by M is rejected by M', ‘and vice versa. 

Let M and M' be n-tape automata, and let N = {i s+eesty) be a set 
of integers between 1 and n, inclusive. Then M and M' are N-re stricted 
equivalent if the set {(6,,...,5,) | for some A € L(M), 6, is the i;th 
component of A, 1 < j < £} is equal to the set £(815+++55,) | for some 
A € LM"), b4, is the i,th component of A, 1 < j < 2}, ive. if M and M' 


accept the same tuples of strings when attention is restricted to the 


subset of their tapes designated by N. 
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6.3 "Equivalence" of Independent Location Schemas and Multi-Tape 

Finite Automata. 

‘Informally, we consider two models for computation to be 
equivalent if their equivalence problems are interchangable and if, 
given an element in one model, we can effectively construct an element 
in the other which simulates it in some well-defined manner. Luckhan, 
Park, and Paterson have demonstrated that independent location schemas 
with n variable symbols are equivalent in this sense to finite automata 
with n tapes. The simulations are straightforward (indeed the simulation 
of the schemas by the automata is rather trivial), but they are of no 
particular interest to us here; the reader is referred to [16] for 
details. We do note here, however, that the weak equivalence and strong 
equivalence problems for the automata eerraanoud directly to the weak 
equivalence and strong equivalence problems for the schemas, while the 
restricted equivalence problem for the automata corresponds to the 
equivalence problem for independent location schemas with designated 
output symbols. 

6.4 Weak Simulation of Multi-Tape Automata by Structured Independent 

Location Schemas. 

It follows from the discussion in the preceding section that any 
independent location iteration schema can be simulated by some multi-tape 
automaton. In this section we demonstrate that an arbitrary multi-tape 
automaton can be "weakly" simulated by some such schema, i.e. simulated 
in such a way that each computation by the automaton corresponds to an 


execution of the schema for a suitably chosen interpretation, and each 
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terminating execution of the schema. corresponds to some computation by 
the automaton. We are thus able to demonstrate the correspondence of 
the weak equivalence problems: for the automata and the schemas, though 
we are not able to: demonstrate a correspondence cf their strong 


_ equivalerice problems. 


6.4.1 The Simulation. 


Let M = Cla maoantye tle {dy s-ee ede dyo Igo dds dy» 4» 4» £, h) be 
an n-tape autamaten, for some n> 0, as defined in Section 6.1. We show 
how to construct an independent location iteration schema Ss which 
weakly simulates the automaton: 

Se will have variable symbols X)seeesX,s representing the tapes of M, 
It will heve an additional variable symbol.y which will be used to record 
the states entered by M during. a simulated computation, and also to 
record the outcome ef the auustaat len (acceptance or, rejection) if the 


computation does not diverge. 


Se will have predicate symbols Pa rrreePs »Pg> corresponding to the 
k 


tape symbols of M. It will also have predicate symbols Pg, ocrreP 2Pys 


Im 
Pg *Pq > corresponding to the states of M, and a “number of moves" symbol 
a'r 
Ba 
Su will have function symbol g representing the advancement of a 
tape head, and symbols a and r denoting acceptance and rejection, 
respectively. 


For notational convenience, we provide simple representations for 


certain boolean expressions: 
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For each i, 1 S i < k, and each j, 1 < j <n, we represent by PS (x,) 
i 
the expression (p_ (x.) A (a(p_ (x,) V p. (x,) V.ee Vip (x.) 
oy, 4 s, J ee a os 
Vp_ (x,) V eee Vp. (x,) V polx,))). 
Sin J *~ 4 vd 


Similarly, for each j, 1 < j <n, we represent by Pa(x, ) the 


expression (P.(x,) A (7, Ge) Vise V a a 


For each i, 1 < ism, we represent by P_ the expression (Py (y) A 


q, 
dy 
(7(p_ (y) Vp. (Gy) V.ee VP OGY) VV iP Gi Vase (y) Vp, ne 
dy q2 44-1 Vit) Ty 
Pp, (y) V p. Cy))), and define expressions for P| , P , and P| ina 
4a 4, dy qa ay 
similar manner. 


Let 7 7 ?, a9 eee 5 be an enumeration of the strings of 
(k+1)" 
length n over the tape alphabet of M. Then for each j, 1 <j < (ct) f 


we represent by Po. the expression (P, (x) ee (x5) A eee A P. (x,)); 
j j, i, 5 
where Sj "Sj * eee °8, = Oe 
2 Jn j 
We adopt a shorthand notation for certain sequences of assignment 


instructions, as follows: 


Let N = ti,» sate >i} be a set of integers between 1 and n, 


inclusive. Then we denote by x - g(x)" the sequences of instructions 


"x, - g(x ae oe Pie e - g(x es 
ant i, iy ip 
The subschemas of Sy are as follows: 


The empty schema Ss. and the divergent schema Si. as defined in 


Chapter IV. 


For each i, 1 Sis (kt1)”, and each j, 1 < j = m, the subschema 


s with program: 
i,j P 124 
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x, : 
h(a, 7,) + ena, 194) 
y + ay) | 


t 
For -each i, lsic (k+1)", the subschema 5, I with program: 
5] 


IF P 
£(q,.9,) THEN S, ELSE S 


x 
Cay) © BORE p,)? 
y+ gly) 


IF P THEN S_ EISE S 
£(q, +9,) E t 
For each i, 1« i< (e+1)", and each j, 1s j < m, the subschema 


R with program: 


i,j 
IF (2 P THEN S ELSE 
er A o> i,j BRE Ry 
For each j, 1< j < m, the subschema R . with program: 
AL) 4 
IF (P A P ) THEN S 5s 
945 Peri)” cett)®, 5 BASE RL pa 
The subschema R et)" ym with program: 
IF (P AP ) THEN S ‘ELSE R 
Im = P(e)" (ct1)™ ym 1,0 
For each i, 1< i< (K+r)", ‘the subschema R, I with program: 
IF AP tT ELSE R 
O, ‘ , saath’ itl, I 
The subschema R 7" with program: 
(k+1) ,1 
IF (Pp AP ) THEN Ss ELSE S 


dy Pept)” Cet)" ,1 ! 
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The schema Su is then: 


IF P THEN S_ ELSE S 
qy E 


WHILE p (y) DO R 
m 


t 


1,1 


IF (PG) ney 2 P. 


IF P, (y) THEN ‘y+ a(y)' ELSE §S 
qa E 


(x) THEN S. ELSE S, 


IF P, (y) THEN 'y + r(y)' ELSE s. 
r 


Let I be a free interpretation for oe and for each predicate 


symbol p of Su let Ys denote the predicate assigned to p by I. 


For each i, 1 s isn, let Ay be the least integer > 0 such that 


he 
q (g ay. ) is true, and let hy be the least integer such that 
£ i 


U, (g Yea y is false. We say that I is a reasonable interpretation 
m 


for Su if exactly one of the predicates Ty >. , eee , Tl, , OH, is 


: 8; Ps Pa. Ps 
i 
true at each element of {g “A, |o<is Lis 1 < 4<n}, and exactly 
j 
one of the predicates Il , I ,...,I0, , >, , U is true 
q) Pao Pan Pay Pa,’ Pay 


at each element of {e-Ay | Osis Ly} 


Each interpretation I which is reasonable for Su defines an n-tuple 
A of strings over the alphabet of M in a straightforward manner: the ith 
symbol in the jth string, 1<j<n, lsis at is symbol s if and only 


if (g° +A, ) is true. 
Ps 5 


Each such interpretation I for Sy defines a sequence of states of M 
in a similar manner: the ith state in the sequence, 1 <i < 3 


i-l 
is q if and only if Ip (e “Ay) is true. 
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The reader may verify that ou diverges under all unreasonable 
interpretations, and converges for the reasonable interpretation I if 
and only if the sequence of states defined by I is consistent with a 
non-divergent computation of Mon A. If the execution of Su converges, 
the symbol a or r is prefixed to the value of symbol y, according as 


the last state of M in the simulated computation is q, oF qd. 


Thus, Su weakly simulates the automaton M in the manner described 


previously. 


6.4.2 Weak Equivalence: A Reducibility. 


As noted, the schema Su constructed in the preceding section diverges 
under all unreasonable interpretations, and diverges under reasonable 
interpretations which define input strings on which M diverges. But the 
schema may also diverge under reasonable interpretations which define 
input strings on which M does not diverge, if the sequence of states 
defined by the interpretation does not correspond to the sequence of 
states entered by M during its computation on the ateines: This behavior 
is an inherent feature of the simulation, and is in fact the feature which 
makes the simulation "weak" (and thus precludes us from reducing the 


strong equivalence problem for the automata to that for the schemas). 


We note also that if the execution of Su terminates for some 
interpretation I, the final value associated with symbol y for the 
execution will depend on the length of M's computation on the input 


strings defined by I. Since the length of the computation made by an 
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equivalent automaton on the same set of strings may be quite different 


from that made by M, it would seem that the simulation is not suitable 


even for a reduction of the weak equivalence problem. Fortunately, the 


following lemma implies that such is not the case: 


Lemma 6,1: 


Let M be an n-tape automaton, for some n > 0. Then we may construct 


from M an equivalent n-tape automaton M' such that precisely one tape 


head is advanced at each step of any convergent computation by M. 


Proof: 


Let Q and T be the states and tape symbols, respectively, of M. 
Let f be the transition function and h the head advancement 
function of M. We first modify M so that no more than a single 
head is advanced during a step of any computation by the 


automaton: 


n 
Let q be a state in Q and let 9 be an element of T such 


that h(q,9) = {iy2-+esdm} for some m> 1. We add to Q new 


(m-1) and extend f and h to these new 


eyce ge? ena Hita@),8)-6 {i;4,}+ for all 


states q', q", ... 5 4 
states so that e(q'? 
6 €T and all i, 1s ism-l. For each 6 € TT: we define 
£(q@")) 5) to be the state f(q,) and we define n(q®!) 6) to 
be tins Finally, we redefine f£(q,@) to be state q' and h(q,q) 
to be ti, }. The procedure is repeated for any additional 
arguments for which the value of h is a set of cardinality 


greater than one, and the resultant automaton has the desired 


property. 


- 120 - 


Assume now that no more than one head is advanced during 
any step in a computation by the automaton. Whenever we have 
f(q,9) = q' for some states q and q' and some o € tT such that 
h(q,) = 6 and h(q',o) # 6, we redefine f(q,—~) to be £(q',«) 
and redefine h(q,o) to be h(q',@). This procedure is repeated 
as long as such q,q' and ~ can be found. The resultant 


automaton is M'. 


Thus we have: 


Theorem 6,1: 
The weak equivalence problem for multi-tape finite automata reduces to 


the weak equivalence problem for independent location iteration schemas. 
Proof: Let x, and My be n-tape automata for some n > 0, and let M', and 


M'y be the automata constructed from'M, and M, asin the 


preceding lemma. Let 5,: and Sy: be the simulating schemas 
1 2 


constructed from MD and M', as in Section 6.4.1. Then M and M' 
are weakly equivalent if and only if Sy: and Sut are weakly 

1 a 
equivalent. 


El 


As we shall see in the next section, Theorem 6.1 is a more interesting 
result than it seems at first glance, sinee the weak equivalence problem 


for the automata can be shown unsolvable. 
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6.5 Undecidability of Weak Equivalence for Independent Location Schemas, 


In this section we demonstrate that weak equivalence is undecidable 
for multi-tape finite automata and hence, according to Theorem 6.1, for 


independent location iteration schemas. 


The following result was implied in [12] and demonstrated explicitly 


in [19]. The proof given here is essentially that in the latter paper. 


Lemma 6,2: 
The inclusion problem for multi-tape finite automata is unsolvable. 
That is, it is recursively undecidable whether L(M) C L(M') for 


arbitrary n-tape automata M and M', 


Proof: Let C be the Post Correspondence Problem defined in Section 4.1. 
It is a trivial matter to construct a 2-tape automaton M such 
that L(M) = {(x, 0) | x= ipfin# or #1), where # is some 
special symbol, and for each j, 1 <j < 2, i, is a symbol 
denoting integer ij, ls i; sk; and 0 = a. co ee OF Oe 

Also, we can construct another 2-tape automaton M' such that 

LM') = {(%,¥) | » is as in L(M) and Y is any word other than 

Yay? Yio’ cee “Yi 3. Clearly, C has a solution if and only if 

L(M) ¢ L(M'), and hence the decidability of inclusion for multi- 


tape automata implies the solvability of the unsolvable Post's 


Correspondence Problem. 
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We now reduce the inclusion problem for multi-tape finite 


automata to the weak equivalence problem for the automata. 


Lemma 6.3: 

Let M be an n-tape automaton, for some n> 0. Then we can construct 

from M an n-tape automaton M' such that L(M) = L(M') and Mt tacts no 

| input. | 

Proof: Informally, we add a new state q to the states of M, and provide 
transitions from q back to q for each length n string from M's 
alphabet. Each transition into the rejecting state of M is 
replaced with a transition fato this new state, .and the resultant 


automaton is M'. 


The following lemma is derived immediately from Lemma 6.1: 


Lemma 6,4: 
Let M be an n-tape automaton, for some n> 0, Then we can construct 
from M an n-tape automaton M' such that L(M) = L(M') and M' rejects any 


input which is not accepted. 


Proof: We construct from M the automaton M' of Lemma 6.1. We than add 
a new state q to this machine, and redefine £(q,5) to be q 
whenever h(q, »9) = §, where f and h are the transition and 
advancement functions of M', qy is any state in M', and 9» is 


any length n string of tape symbols. We extend f and h to state 
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q as. follows: 


If p is a string of length a other than $7, ecautins £(q,) 
to be q and h(q,o) to be {i .the. ith cemponent of ~ is not $, 
1s isn}. If pis $", then £(q,9): te.q,, where q. is the 
rejecting. state of M',- and. h{q,9) is the empty set. The 


resultant automaton is M". 


From these: lemmas we obtain: 
Theorem 6,2: 
The inclusion problem for multi-tape finite automdita ts reducible to 


the weak equivalence problem for the automata. 


Progf: Let M, and M, be arbitrary fi Capa automata, for some n > 0. 
Let MD be the automaton constructed Eom My as in lene 6. 3, 
Let x", be the automaton constructed from M, as in Lemme 6.4, 
Then L(M, yc = LQ) if and oly if MY and M", are weakly 


equivalent. 


The weak equivalence problem for independent lééation iteration schemas 


wet 


is unsolvable. . 


Proof: Immediate from Theorem 6.1, Lemma 6.2, and Theorem 6.2. 
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6.6 Single State Automata. 

The problems which prevent the strong simulation of multi-tape 
automata by itezation schemas stem from the fact that an interpretation 
for a simulating schema must include a suitable "aefinition of the 
sequence of states entered by the automata during its computation; the 
schema's execution must diverge if this sequence is incorrect or is 
unreasonably defined. Since equivalent automata will generally have 
different state sets, there is no way to ensure that schemas which 
simulate equivalent automata will both diverge or. both converge under a 
given pair of consistent interpretations. In particular, we can generally 
provide such schemas with interpretations which are reasonable (in the 
sense of Section 6.4.1) for one schema but umreasonable for the other, 
thus forcing one schema to diverge under its interpretation while 
permitting the other to converge. _ _— | 

We would expect, on the other hand, that automata with a single 
state would present no such problems, although we might question whether 
such automata are capable of recognizing —_ interesting languages and 
whether their equivalence problems are related in any icaveciviel way 


to those for multi-tape automata in general. 


In this section we demonstrate that the iteration achomss are 
indeed capable of strongly simulating such automata, and also show that 
the automata are capable of recognizing non-trivial languages. We show, 
in fact, that the equivalence problem for ee eee automata reduces to 


a restricted equivalence pee for the single state automata. 
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6.6.1 Single State Automata -— Definitions. 


Actually, ene tem single state automaton is sonething of a 
misnomer, since the automata which we define pel ow: contain two states. 
The Pega of the initial state of an avtomton, however, is simply 
to ensure chat ‘the automaton begin | a computation in one of some finite 
number of designated configurations. In particular, once the initial 
state is left no transitions back into the state are permnteteds also, 
no movement of the tape heads is permitted “while the automaton is in 
its initial state or meine out of the state. (Intuitively, we might 
think of the initial state as something of an "input monitor": if the 
tuple of initial symbols on the automaton’ 8 tapes is acceptable, the 
control state of the automaton is entered and the computation carried 
out. If the tuple is not acceptable, the initial state is never left 


and the computation diverges. ) 


The definition which follows is essentially the same as that given 
in Section 6.1 for multi-tape automata, aeeeoe that we dispense with 
accepting and rejecting states and define the adyangement and transition 
functions. in such a way as to ensure that the initial state is as 
described above. (The automata will have no rejecting states, and their 


control states will function as accepting states.) _ 
A single state n-tape automaton is a fiveetuple © 
M = (T, 4, 4,, f, h) 
where: T is a finite set of tape symbols, including the endmarker $. 


q is the control state of the automaton. 
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qy is the initial state of the automaton. 
f: {4,4;} x T" > {q,a;} is the state trangition function, a 
total function satisfying the property that. £(q,9) = q, ‘all p ¢ r, 


g{152,-+.,0} is the head adva ncenent function, 
a total function eatisfying the properties chat bCap,9) = fp, and i £ 


h: {aa} xT +2 


h(q,%) whenever the ith component ‘of 9 ‘is 6, for all o e A, 


Cont gure tions and computations are defined for “ates state 


automata in the same manner as for multi~tape automata in general. An 
n-tuple A of strings in T* is accepted by M if ‘cease ie finite 
computation by M ending with the configuration (apar” ); and is 


rejected by M if no pees ccempta tien exists. The Jenauasee accapted 
and rejected by M are aetines as for mults-tape automata. 


Strong and restricted eaat caleane are defined for siigi state 
automata as in Section 6.2. We shall not consider notions of weak 


equivalence for the automata. 


6.6.2 Strong Equivalence — A Reducfbility. 

Let M = ({8,,..+,8,5%}, 9, G,, f, h) be a Binglé state n-tape’ 
automaton, for some n> 0. 

We shall show how to construct an independent location iteration 
schema Sy, which simulates M. (The construction is quite similar to that 
described in Section 6.4.1, and we use much ‘of the game terminology. ) 

Su has variable symbols gs eas and th It has predicate symbols 


Ps reeesPa, Pg and Pn ze has a aa oar function = lan ge 


1 


“iis 


Expressions of the form Pa and P(x) are as defined in 
Section 6.4.1; we use the same enumeration of length n strings over the 


alphabet of M, and the expressions P 


see P are as defined 


in that section. 


For each i, 1 Sis (k+1)", we define..S p tobe the schema: 


*n(qs pz) : 8O4,0,) 


IF p(y) THEN S, ELSE S, 
y - gly) a . 
4 times, where £ is the 


cardinality of h 


(a,9,) 


IF P..Cy) THEN s. ELSE s. 
y = gy) 


For each i, 1 si < (et1)", we define R, to be the schema: . 
IF Foy THEN Ms ELSE Bia 

We define R. n *° be the schem: 
(ke+1) 


Ir P THEN-S = -_ ELSE S_ 
Yet)" cea” 


Now, let By veeeed, be an enumeration: of thoge’ length n strings | 


for which £(q75,) =qlsisk Then 6,48 the scheita: ~ 


TF (PV ++ V Fg) THEM 8 


E 


ELSE 5) 


WHILE PCy) DO Ry 


(x )) THEN S_ ELSE S 
n ft 


on (PG) Newser ® Py - 
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We define reasonable interpretations for Su in a manner analogous 
to that in Section 6.4.1, and note that each reasonable interpretation 
defines an n-tupie of strings geek M's alphabet. The reader may woriey 
that - diverges for all unreasonable interpretations, and converges for 
a reasonable interpretation I if and only if I defines a tuple of strings 


accepted by M and assigns to p,, a predicate Il, such that: 
m 


I (gi-A_) = true, all i < 4 
m Yy 
Ip (g'*Ay) = false, t= 2 
m 


where £ is the. number of symbols in the tuple of strings defined by I. 


In such a case, the final value associated with y will be gA,. 


We have immediately: 


Theorem 6,3: 


The strong equivalence problem for single state multi-tape automata 


reduces to that for independent location iteration schemes. 


Proof: Let M and M' be single state n-tape automata, for some n > 0. 
We construct from M and M' the simulating schemas Sy and S,, 
as above, and note that M and M' are strongly equivalent if 


and only if Sy and St are strongly equivalent. 
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6.7 Equivalence of Multi-Tape Automata’ — A Reducibility Result. 


We have shown that the strong equivalence prcblen for single 
state multi-tape automata reduces to chat for structured independent 
location schemas. In this section, we provide motivation for that 
result by showing that such autdea te constitute a einpeisinel> rich 
class of multi-tape automata, and are in fact capable of simulating 
arbitrary automata if we allow them additional tapes on which to store 
control information. Since the particular information which is stored 
on these tapes will depend on the automaton being simulated, we must 
content ourselves with showing that the strong ‘equivalence problem for 
multi-ta tape automata reduces to a | restricted “equivalence problem for the 


single state automata. 


We begin with some useful definitions: — 


Let @ = 8, °8; + ... °8, °8 * se. be a string over some 
ia a) fe dit . 
alphabet T which does not contain the special symbol #. Then an expansion 


of o is any string of the form: 


j j ng He: py tL 
Po = gO ad. Me ag 8y° (HI 2+ eee ey, Or) Ba rigs a #) eee 


in which for each i, o. is an arbitrary string in .* and j t is. an.integer 
greater than 0. We extend the notion of expansion to tuples of strings 
and sets of such tuples in the obvious manner: 

If A= (9; toe @ ) isa rupie of strings over T, then an expansion 
of A is any tuple A. = (7. picee sD ) in which for each i, 1 < i<no, 
5 is an expansion of P,° If X is gree of tuples of strings over T, then 


the expansion of X is the set EXP(X) = {A, lA, is an gesmna tod of some A €X}. 
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Let M be an n-tape automaton with tape alphabet T and control 
states represented by a ‘set of symbols 3, and such that no more than a 
single tape head is advanced during any step in a computation by M. 
Let A = {9 > ioe,¢ 93 be a tuple of strings accepted by M. Then the 
trace of A with respect to M is the nt4-tuple of strings ‘ = 
Pay BV. Vs Pps tees Py} over TU QU fl, santé a}, such that @€ 
Th eke a represents the sequence of tape heads moved during the 
computation by which M accepts a per is the sequence of symbols 
scanned during the computation, and y € G* wepeesents the sequence of 
states entered by M during the computation. We denote by TRBACEQ!) the 


set iA, | A. is the trace of some A accepted by M}. 


As we shall see, it is precisely the information in the first four 
components of a trace which constitutes the control information required 
by a single state automaton in the simulation of an arbitrary multi-tape 


automaton. 


We note that if ~ is a string over an alphabet T not containing #, 
then the expansion of » formed by inserting #. between each pair of 
symbols in @ cannot be obteined as an expansion of any other string. 


Thus we have: 


Lemma 6,6: 
Let M and M' be n-tape finite automata whose tape alphabets do not 


contain the symbol #. Then M and M' accept the same language if and 


only if EXP(L(M)) = EXP(L(M')). —/ 
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Lemma 6.7: 

Let M be an n-tape automaton (T, Q, Gyo Ia> I> f, h) such that exactly 

one tape head is advanced during each step of any convergent computation 
by M, some n> 0. Then we may construct fra a single-state automaton 


M' with nt4 tapes, such that L(M') = EXP(TRACE(M)). 


Proof: A formal definition of M' appears in Appendix C. We describe 


the behavior of M' informally below: 


aA 
Let Q be the set of symbols {a, | q,; is a state in Q}, and 
let N = {1,2, ... ,n}. The alphabet of M' is the set T' = 


TUQUNU {#}, where # is a special symbol not appearing in T. 


We may represent a configuration of M' as an nti-tuple of 
strings over T', and we say that a configuration A is a base 
configuration of M' if TAIL(A) is of the form be s+ 4; “4; +9, 
where 2 €N is such that = h(q,>9) in M, and s is the £th 
symbol in o € T". Intuitively, a base configuration of M' 
represents some configuration of M just prior to some step 4 in 
a computation by M. The first four tapes in such a base 
configuration contain the following information: 

(1) The head of M which is to be advanced at step of M's 
computation. 

(2) The symbol currently under scan by this head. 

(3) The current intemal state of M, recorded on each of tapes 
3 and 4. 


We shall describe the sequence of moves by which M' advances 
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to a new base configuration representing the configuration of M 


at the conclusion of step a of its computation: 


M' moves head A+4 until the symbol # is scanned. It then 
moves head 4 until # is scanned, and likewise head 1. 
(Intuitively, we may think of M' as preparing these tapes for 
its next base configuration.) 

M' advances head 4 past any number of #'s until a non-# 
is scanned. Unless this symbol is ays where , = £(q, 59) in M, 
the computation diverges, ive. M! advances no tape head. This 
behavior of M' ensures that tape 4 has the symbol representing 
the internal state of M after step 4 of its computation. 

M' advances head 2 and then head 3 until #'s are scanned 
on these tapes. It then advances head £4 past any number of 
#'s until some symbol s' € T is scanned on the tape, diverging 
if the first symbol after the #'s is not a symbol in T. At this 
point, M' has discarded the original scanned symbol and internal 
state of M since this information is no longer needed; it has 
also advanced the appropriate tape head and scanned symbol s', 
so that each of the last n tape heads is scanning a symbol in T. 
Let g' denote the string composed of these n scanned symbols: 

M' advances head 2 past #'s, until some s" € T is scanned 
such that s" is under scan on the kt4th tape of M', where k is 
h(q529!). If the first symbol after the #'s is not such an s", M' 
diverges. M' will thus have ensured that the "symbol under scan" 


component of its next base configuration is correct. 
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M' now advances head 1 past any number of #'s until a symbol 
2' EN is scanned such that £' = h(q,o@')- If any symbol other 
than 4! immediately follows the #'s, M' diverges. M' thus ensures 
that the "head to be advanced" camponent of its next base 
configuration is correct. 

Finally, M' advances head 3 past any owmber of #'s until 
symbol 4 is scanned on that tape, diverging if a symbol other 
than q , is scanned first. At this. point, -M' has reached the 
desired base configuration. 

The reader may verify that. the..conditions geverning moves 
are unique in each case, and thus that the behavior of M' as 
outlined is consistent with the requirement thet M' have a single 
control state. (Of course, we need to add rules ensuring that a 
computation of M' begins at a base configuration representing an 
initial configuration of M, and additional rules allowing a 
computation of M' to terminate if a base configuration represents 
a terminal configuration of M, but the addition of such rules 


is straightforward: the curious reader is referred to Appendix C). 


O 


We are now in a position to prove the main result of this section: 


Theorem 6,4: 
The strong equivalence problem for multi-tape automata reduces to a 


restricted equivalence problem for single state automata. 


- 134 - 


Proof: Let M and M' be arbitrary n-tape automata, for some n> 0. From 
Lemma 6.1, we can assume without loss of generality that exactly 
one tape head moves during each step of any convergent computation 
by either schema. Let M, and MY be single state acceptors for 
EXP(TRACE(M)) and EXP(TRACE(M')), respectively, constructed as in 
the preceding lemma. Then from Lemma 6.6, L(M) = L(M') if and 
only if M, and M’. are N-restricted equivalent, N = {5,6,.+.,nt4}. 
We may interchange the accepting and rejecting states of M and M' 
to obtain n-tape automata M and M’ such that L(M) me EQ) and 
L(M') = LOM’), I we construct single state acceptors M, and M! 
for EXP(TRACE(M) ) and EXP(TRACE(M")), then M is equivalent to M' 
if and only if M, and M',, and M, and M',, are pairwise 


N-restricted equivalent. 
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6.7. Discussion. 


We have attempted in this chapter to relate the equivalence problems 
for structured and non-structured independent location schemas. We began 
by looking at a class of automata equivalent to the non-structured 
schemas, and showed that such automata could be simulated by structured 
schemas which diverge whenever they are provided with atewpretartons 
not corresponding to valid computations. While such a simulation might 
be of some practical interest, Corollary 6.5 shows that it is of little 
value if our concern is with such issues as schematological equivalence. 
In fact, the corollary suggests that weak equivalence is likely to be 
undecidable even for classes of schemas for which strong equivalence is 
decidable. If we are looking for potentially solvable problems or 
potentially useful reducibilities, therefore, we had best restrict 


attention to strong equivalence and strong simulations. 


Via Theorems 6.3 and 6.4, we have been able to establish another 
relation between the equivalence problems for the structured and non- 
structured schemas, While the relation is admittedly somewhat indirect, 
it never-the-less raises some questions (for example, regarding the 
decidability of equivalence for single state automata) which are of 
interest in their own right. It would seem, therefore, that this 


relation is worth pursuing. 
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CHAPTER VII: SUMMARY 


In this thesis we have introduced i itepation achemis (monadic 
schemas camposed of assignment statements, ‘conditional statements, and 
iteration statements) and have shown that Gch schemas correspond to 
monadic program schemas with structured flowcharts. We have also shown 
that the schemas ‘form an incomplete subclass of the monadic progres schema s 
in the sense that there exist monadic program schesins which are not 


ee to any teeretiod, schema. 
We have defined several subclasses of iteration schemas: 


(i) Free schemas in which tests are never repeated during schema 
executions. 
(ii) Sipgle appearance schemas in which predicate symbols occur only 
once. | : Hy 
(111) Conditional-fnee schemas composed solely of assignment statements 
and iteration statements. 
(iv) Independent location schemas in which the assignment and argument 
variables are one and the same in each seigment statement. 
(v) Restricted location schemas in which initial assignment 


statements of the form 'x* y' are permitted, but which otherwise are 


independent location schemas. 


We have formalized the notion of schema equivalence as the functional 
equivalence of schemas under free aSeRDTetaticns, and have explored the 


equivalence problems for thaw various classes of iteration schemas. We 
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were able to show that equivalence is undecidable for restricted location 
schemas, and strengthened the proof to demonstrate the undecidability of 
equivalence for such schemas which are conditional~free. We concluded 
that restricting the schemas to a single function and predicate symbol 
avails nothing in solvability, and that equivalence is unsolvable for 
such schemas with just two variable symbols. We have also shown that 
arbitrary nesting of iteration statements is not essential to unsolvable 
problems, and that unsolvability is with us for schemas with just two 
levels of iteration and for conditional-free schemas with just three 


levels. 


We considered other features of the schemas for which we were able 
to demonstrate unsolvability, and this suggested several possibly solvable 
domains. We established techniques enabling us to demonstrate the 
decidability of equivalence for free schemas which are single appearance, 
or which are independent location and conditional-free; and for the class 
of schemas which are single appearance and conditional-free. While several 
interesting problems are left open, we are confident that the methodology 
developed can be extended to more general classes of iteration schemas. 
The results established in this thesis are summarized in Fig.10, along 


with some of the more interesting open problems. 


We have explored in some detail the way in which equivalence problems 
for independent location iteration schemas are related to equivalence 
problems for independent location program schemas and multi-tape finite 
automata. We have shown that the iteration schemas are capable of 


"weakly" simulating such automata, and have used this result to demonstrate 
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FIGURE 10: 
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the undecidability of weak equivalence (i.e. equivalence for terminating 
computations) for the independent location iteration echems. We have 
shown that the equivalence problem for: waieitaca, automate with a single 
control state is reducible to that for independent location iteration 
schemas, and have also demonstrated thet the equivalence problem for the 
automata in general reduces to the eta of deciding whether single 


state automta are equivalent over some arbitrary subset. of their tapes. 


The obvious areas for further study are suggested by Fig, 10. 
A positive solution to the equivalence problem: for frea iteration schemas 
would be a major achievement since ie would. lend soiid ‘support - the 
| conjecture that non-freeness is an essential characteristic of unsolvable 
problems. Such a solution for restricted leéatfori schemas would also be 
welcome since it would at least establish a (Geeetaas" boundary between 
decidability and undecidability for these achemea. Finally, a positive 
solution to the equivalence problem for independent “Location iteration 
schemas would be, we feel, a major step in the solution of the equivalence 
problem for independent location schemas in general; at the very least 
it would provide, by implying the decidability of eduivaleube. for single 
state automata, an additional avenue by which to approach the equivalence 
problem for multi-tape automata in general, an open problem of long 


standing. 


1. 


3. 


4. 


5. 


6. 


7. 


8. 
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APPENDIX A: Decidability of Freeness for Independent Location Schemas 


Let S be an arbitrary independent location schema, and let F be its 
flowchart. We say that a pair of nodes in F are similar if both nodes 
are transfer nodes labelled 'p(x)' for some predicate symbol p and 
variable symbol x. We claim that S is free if and only if each directed 
path from a node n to a similar node n' in F contains an assignment node 
labelled 'x + f(x)' where f is some function symbol and x is the 


variable symbol of n and n': 


(IF) If such is the case, then no variable is ever tested twice with the 
same predicate during an execution of S without an intervening assignment 
to the variable. Since S is an independent location schema, it is clear 


that no test can ever be repeated during a free execution of S. 


(ONLY IF) An essential characteristic of a free schema is that every path 
through its flowchart corresponds to an execution of the schema. If there 
exists a directed path from n to n' containing no assignment labelled 

'x « £(x)' for some f, then a value associated with x will be tested at 
both n and n' during any execution of S which traverses this path, and 


thus S cannot be free. 
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APPENDIX B: Undecidabi lity of Equivalence for Restricted Location Schemas 
With One Function Symbol and One Predicate Symbol. 
We shall redefine the schemas of Section 4.3.° The schema So is: 
UNTIL -p(x) DO S, 


The schema Ss is: 


WHILE p(x) DO S, 


Schemas S' and s' are defined similarly. 


For each i, ls isk, Aw, tgs 


IF p(v) THEN S, ELSE S 


' 
ty 


x © £(x) 
v ¢ f(v) 


IF p(v) THEN s. 


ELSE S, 


i 
x ¢ £(x) 2 


ve £f(v) 


IF p(v) THENS, ELSE S,. 


x © £(x) i 


where s. °8, > ... ‘8 = w , as befote. Schemas of the form B. are 
4, 19 1g | Y; 


defined similarly, with symbol u in plece of v. 
For each i, l<ic<k, R, is: 

wie £(w,) 

IF p(w,) THEN A, ELSE S, 


i 
IF p(w,) THEN By ELSE R,,, 
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The schema R. is: 


1 
wh € £(w,) 
z « f(z) 
IF p(w.) THEN Aw ELSE Ss, 
IF p(w,) THEN B ELSE R, 


1 

The schema R. is: 

we t f(w,) 

_iIF p(w.) THEN Aw ELSE Se 

Ir p(w) THEN By ELSE 5, 
The schema § is: 

yex 

u¢v 

IF p(z) THEN Ry ELSE Ri 


WHILE p(z) DOR, 
IF p(v) THEN s, ELSE S. 


IF p(u) THEN S, ELSE Se 


We note here that, in contrast to the results established in [18] 
for monadic program schemas in general, we are umable to establish the 
undecidability result for schemas which have simultaneously single 


predicate and function symbols and two variable symbols. 
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APPENDIX C: Definition of M'. 


Let T, N, a, and T' be as in the proof of Lemma 6. he In the following, 
s's shall denote elements of T, 1' 8 elements of ' x, 4 's elements of a, 
lower case Greek letters elements of 1, and x's arbitrary eyabols in TT? 


other than # and $. 


M' is (T', q, dz!» f£', h') where £' is defined as follows: 
i) £"(a,' X) =q if X is 9.4, 14, Wp where gq, is £6q, 50) in My: 
L*= h(q, 5) in M, and s is the gth symbol of w. 


11) £'(q.X) = q, all xe (a'y"t 


and h' is defined as follows: 


i) h(a, Hee aie Onx-B) = ph, [of = e1. 
11) b'(q, £-8-9,°4, -O-#- B) = 4. 


iii) h'(q, oar = 1. 


= | 
> o> way 


iv) b'(q, #-9°q, -#-a-#-B) = 4. 
v) h'(q, $-8-4,-4,-a-#-B) = 2, 1f 
vi) B'(q, HOG, -4,-0-#-B) = 3. 
vii) h'(q, HH «4, -O-# -B) = |al+s. 
vitt) h'(q, #eP-G,-y) = 2. 
ix) b'(q, #-8-#°45-y) = 1, if h(q,-¥) is. defined in M and equals 4 


j ad h(q,> Gra-B) in M. 


for some g such that s' is the gth symbol of y; or s' = $ and y = $7. 
x) h'(q, 4-8-#-4,-¥) =3 if h(a,-v) = and s' is the gth 


symbol in y. 


xi) h'(q, #$-4,-45°S") a 


xii) h'(q, $$-4,-4,-9") = 
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xiii) h'(q, $$#-9,-$°) = 4. 


xiv) h'(q, $s##$") = 3. 
xv) h'(q, $S$#$") = 4. 


and is undefined in all other 


cases. 
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